Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-44574

Redirect requests that have a different HOST header than what JIRA is configured to serve for to the correct (configured) JIRA server url.

    XMLWordPrintable

Details

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion.

      There have been a number of security issues in non-atlassian software caused by using the HOST header of an incoming request. Therefore, this suggestion issue to request that when JIRA sees a request with a HOST header that does not match the instance's server url to redirect the request to the server url.

      Attachments

        Issue Links

          is related to

          Suggestion - JRASERVER-44574 Redirect requests that have a different HOST header than what JIRA is configured to serve for to the correct (configured) JIRA server url.

          • Closed

          Suggestion - BSERV-9429 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Gathering Interest

          Suggestion - CONFCLOUD-39636 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Gathering Interest

          Suggestion - BAM-18112 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Gathering Interest

          Suggestion - CWD-4850 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Gathering Interest

          Suggestion - FE-6744 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Not Being Considered

          Activity

            People

              Unassigned Unassigned
              dblack David Black
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: