Details
-
Suggestion
-
Resolution: Won't Fix
-
None
-
None
Description
NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion.
Background of The Request
Currently any vm(s) located under <CONF_Install_Dir>/confluence/pages are available for anonymous user to access easily.
Although this content does not reveal any specific confidential information as it won't load any pages content, however it will reveal all the installed macro available for Confluence user to use.
If the Confluence instance is not open to public this behavior is disturbing customers as they don't want public to know anything about their instance including all installed plugins.
Attachments
Issue Links
- relates to
-
CONFCLOUD-29067 Hide All vm(s) Files Under Pages Directory From Anonymous User
- Closed