Details
-
Suggestion
-
Resolution: Unresolved
-
None
-
0
-
Description
There have been a number of security issues in non-atlassian software caused by using the HOST header of an incoming request. Therefore, this suggestion issue to request that when Bamboo sees a request with a HOST header that does not match the instance's server url to redirect the request to the server url.
Attachments
Issue Links
- relates to
-
JRACLOUD-44574 Redirect requests that have a different HOST header than what JIRA is configured to serve for to the correct (configured) JIRA server url.
- Closed
-
JRASERVER-44574 Redirect requests that have a different HOST header than what JIRA is configured to serve for to the correct (configured) JIRA server url.
- Closed