Application Navigator appends unexpected "xpis" query parameter to external (non-Atlassian) URLs

XMLWordPrintable

    • 1
    • Severity 3 - Minor

      Issue Summary

      Application Navigator appends an unexpected "xpis" query parameter to external (non-Atlassian) URLs.

      The xpis parameter is related to Atlassian's internal cross-product interaction tracking. It is designed to be consumed and stripped by other Atlassian products, but external destinations can't process it. The parameter should not be appended to URLs that point outside of Atlassian's product ecosystem.

      Steps to Reproduce

      1. As a Site Admin, go to Site Administration → Application Navigator (/plugins/servlet/customize-application-navigator)
      2. Add a custom link pointing to an external (non-Atlassian) URL (e.g., https://example.com/app)
      3. Save the configuration
      4. As any user, click the custom external link from the Application Navigator (app switcher)

      Expected Results

      The user is navigated to the external URL exactly as configured, e.g.:
      https://example.com/app

      Actual Results

      An xpis query parameter is appended to the URL before navigation, e.g.:
      https://example.com/app?xpis=xxxxxxxxx 

      This causes issues when the external application does not tolerate unexpected query parameters (e.g., strict URL validation, routing errors, or signature mismatches).

      Workaround

      None currently available. The parameter is injected client-side and cannot be controlled by administrators or end users.

              Assignee:
              Elizabeth Zeng
              Reporter:
              Rodrigo Bozza (Atlassian)
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: