• Type: Bug
• Resolution: Fixed
• Priority: Highest
• Fix Version/s: 5.8.6
• Affects Version/s: 5.8.5
• Component/s: None
• Labels:

  • affects-server
  • blocking-OD
  • blocking-OD60
  • collector-2c26a36d
  • csrf
  • no-cvss-required
  • security
  • xsrf
• Environment:

  Hide

  Location: https://extranet.atlassian.com/users/removepagenotification.action?pageId=2509345462
  User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.130 Safari/537.36
  Screen Resolution: 1920 x 1200
  User Name: akdominguez
  Current Dark Features: blueprint-jirareport,blueprint-jirareports,blueprint-decisions,cq.bigsearchbox,confluence-inline-comments-resolved,confluence-monitoring.hibernate.enable,restrictions.new.dialog,federated.search,adg.email.enable,jirachart.createdvsresolved,file-annotations,tasks2,view-file-macro-placeholder,view-file-macro-insert-from-drag-and-drop,editor-metadata-relocation,show.business.group.in.user.hover,remove.attachment.button,confluence-inline-comments-rich-editor,blueprint-retrospectives,confluence-questions,confluence-table-enhancements.copy-cut-paste-cols,heatmapper,cq.space,notification.plugin.api.enabled.com.atlassian.confluence.plugins.files.notifications.event.FileContentMentionUpdateEvent,quick-reload-inline-comments-flags,view-file-thumbnail,confluence-table-enhancements.sticky-headers,jirachart.twodimensional,confluence-table-enhancements.auto-row,total-comment-count,view-file-macro-convert-to-thumbnail,quick-reload-inline-comments,pdf-preview,notification.plugin.api.enabled.com.atlassian.confluence.plugins.files.notifications.event.FileContentUpdateEvent,previews.versions,confluence-monitoring.enable,notification.plugin.api.enabled.com.atlassian.confluence.plugins.files.notifications.event.FileContentRemoveEvent,hipchat.chatbar,confluence.wrap.macro,previews.conversion-service,content.rank,wiki.macro.disable.antisamy,notification.plugin.api.enabled.com.atlassian.confluence.plugins.inlinecomments.events.InlineCommentResolveEvent,previews.trigger-all-file-types,view-file-macro-insert-from-exclamation-mark,view-file-thumbnail-polling,jira-placeholder,confluence-highlight-internal-non-privacy-policy-safe-events,confluence.request.access.enable,email-tracking,confluence.dark.feature.view-storage,file-notifications,ondemand.marketplace.prototype,file-annotations.likes,notification.plugin.api.enabled.com.atlassian.confluence.plugins.sharepage.api.ShareAttachmentEvent,confluence-inline-comments,wikidocs.WIK,confluence-inline-comments-dangling-comment,notification.plugin.api.enabled.com.atlassian.confluence.plugins.sharepage.api.ShareContentEvent,notification.plugin.api.enabled.com.atlassian.confluence.plugins.mentions.api.ConfluenceMentionEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.security.ForgotPasswordEvent,notification.plugin.api.enabled.com.atlassian.confluence.plugins.tasklist.event.SendTaskEmailEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.page.async.PageMovedEvent,previews.sharing,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.attachment.AttachmentBatchUploadCompletedEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.comment.CommentCreateEvent,notification.plugin.api.enabled.com.atlassian.confluence.efi.emails.events.OnboardingLessUsersEvent,atlassian.aui.raphael.disabled,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.comment.CommentUpdateEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.follow.FollowEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.page.async.PageEditedEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.blogpost.BlogPostCreateEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.like.LikeCreatedEvent,notification.plugin.api.enabled.com.atlassian.confluence.plugins.inlinecomments.events.InlineCommentCreateEvent,previews.sharing.pushstate,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.blogpost.BlogPostUpdateEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.page.async.PageCreatedEvent,notification.plugin.api.enabled.com.atlassian.confluence.efi.emails.events.OnboardingNoSpaceCreatedEvent,notification.plugin.api.enabled.com.atlassian.confluence.plugins.hipchat.api.events.HipChatUserMapped,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.blogpost.BlogPostMovedEvent
  SpaceTheme: theme-default profile aui-layout aui-theme-default
  VersionNumber: 5.9.0-m30

  Show

  Location : https://extranet.atlassian.com/users/removepagenotification.action?pageId=2509345462 User-Agent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.130 Safari/537.36 Screen Resolution : 1920 x 1200 User Name : akdominguez Current Dark Features : blueprint-jirareport,blueprint-jirareports,blueprint-decisions,cq.bigsearchbox,confluence-inline-comments-resolved,confluence-monitoring.hibernate.enable,restrictions.new.dialog,federated.search,adg.email.enable,jirachart.createdvsresolved,file-annotations,tasks2,view-file-macro-placeholder,view-file-macro-insert-from-drag-and-drop,editor-metadata-relocation,show.business.group.in.user.hover,remove.attachment.button,confluence-inline-comments-rich-editor,blueprint-retrospectives,confluence-questions,confluence-table-enhancements.copy-cut-paste-cols,heatmapper,cq.space,notification.plugin.api.enabled.com.atlassian.confluence.plugins.files.notifications.event.FileContentMentionUpdateEvent,quick-reload-inline-comments-flags,view-file-thumbnail,confluence-table-enhancements.sticky-headers,jirachart.twodimensional,confluence-table-enhancements.auto-row,total-comment-count,view-file-macro-convert-to-thumbnail,quick-reload-inline-comments,pdf-preview,notification.plugin.api.enabled.com.atlassian.confluence.plugins.files.notifications.event.FileContentUpdateEvent,previews.versions,confluence-monitoring.enable,notification.plugin.api.enabled.com.atlassian.confluence.plugins.files.notifications.event.FileContentRemoveEvent,hipchat.chatbar,confluence.wrap.macro,previews.conversion-service,content.rank,wiki.macro.disable.antisamy,notification.plugin.api.enabled.com.atlassian.confluence.plugins.inlinecomments.events.InlineCommentResolveEvent,previews.trigger-all-file-types,view-file-macro-insert-from-exclamation-mark,view-file-thumbnail-polling,jira-placeholder,confluence-highlight-internal-non-privacy-policy-safe-events,confluence.request.access.enable,email-tracking,confluence.dark.feature.view-storage,file-notifications,ondemand.marketplace.prototype,file-annotations.likes,notification.plugin.api.enabled.com.atlassian.confluence.plugins.sharepage.api.ShareAttachmentEvent,confluence-inline-comments,wikidocs.WIK,confluence-inline-comments-dangling-comment,notification.plugin.api.enabled.com.atlassian.confluence.plugins.sharepage.api.ShareContentEvent,notification.plugin.api.enabled.com.atlassian.confluence.plugins.mentions.api.ConfluenceMentionEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.security.ForgotPasswordEvent,notification.plugin.api.enabled.com.atlassian.confluence.plugins.tasklist.event.SendTaskEmailEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.page.async.PageMovedEvent,previews.sharing,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.attachment.AttachmentBatchUploadCompletedEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.comment.CommentCreateEvent,notification.plugin.api.enabled.com.atlassian.confluence.efi.emails.events.OnboardingLessUsersEvent,atlassian.aui.raphael.disabled,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.comment.CommentUpdateEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.follow.FollowEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.page.async.PageEditedEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.blogpost.BlogPostCreateEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.like.LikeCreatedEvent,notification.plugin.api.enabled.com.atlassian.confluence.plugins.inlinecomments.events.InlineCommentCreateEvent,previews.sharing.pushstate,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.blogpost.BlogPostUpdateEvent,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.page.async.PageCreatedEvent,notification.plugin.api.enabled.com.atlassian.confluence.efi.emails.events.OnboardingNoSpaceCreatedEvent,notification.plugin.api.enabled.com.atlassian.confluence.plugins.hipchat.api.events.HipChatUserMapped,notification.plugin.api.enabled.com.atlassian.confluence.event.events.content.blogpost.BlogPostMovedEvent SpaceTheme : theme-default profile aui-layout aui-theme-default VersionNumber : 5.9.0-m30

[CONFSERVER-38489] Stop Watching Page in email footer is broken

Collapse comment: ig (Inactive) added a comment - 10/Jul/2015 2:25 AM

ig (Inactive) added a comment - 10/Jul/2015 2:25 AM

Sorry, I missed the label. Used to looking for fix version or affects version. (thumbsup)

Expand comment: ig (Inactive) added a comment - 10/Jul/2015 2:25 AM

ig (Inactive) added a comment - 10/Jul/2015 2:25 AM Sorry, I missed the label. Used to looking for fix version or affects version. (thumbsup)

Collapse comment: Mark Hrynczak (Inactive) added a comment - 10/Jul/2015 2:24 AM

Mark Hrynczak (Inactive) added a comment - 10/Jul/2015 2:24 AM

igrunert this is already labelled as 'blocking-OD60' rather than OD-59.

Expand comment: Mark Hrynczak (Inactive) added a comment - 10/Jul/2015 2:24 AM

Mark Hrynczak (Inactive) added a comment - 10/Jul/2015 2:24 AM igrunert this is already labelled as 'blocking-OD60' rather than OD-59.

Collapse comment: ig (Inactive) added a comment - 10/Jul/2015 2:20 AM

ig (Inactive) added a comment - 10/Jul/2015 2:20 AM

This bug is present in OD-58, so it's already shipped. This shouldn't block OD-59 - we should roll this fix forward to OD-60 given we haven't had major support blowback and we won't be able to build a new OD-59 that contains the fix before Monday anyway. We shouldn't block shipping the improvements in OD-59 because we can't get a fix for an issue that's in production ready in time for that release.

Expand comment: ig (Inactive) added a comment - 10/Jul/2015 2:20 AM

ig (Inactive) added a comment - 10/Jul/2015 2:20 AM This bug is present in OD-58, so it's already shipped. This shouldn't block OD-59 - we should roll this fix forward to OD-60 given we haven't had major support blowback and we won't be able to build a new OD-59 that contains the fix before Monday anyway. We shouldn't block shipping the improvements in OD-59 because we can't get a fix for an issue that's in production ready in time for that release.

Collapse comment: Blake Riosa (Inactive) added a comment - 10/Jul/2015 12:31 AM

Blake Riosa (Inactive) added a comment - 10/Jul/2015 12:31 AM

Cause is this security fix https://jira.atlassian.com/browse/CONF-37975

Expand comment: Blake Riosa (Inactive) added a comment - 10/Jul/2015 12:31 AM

Blake Riosa (Inactive) added a comment - 10/Jul/2015 12:31 AM Cause is this security fix https://jira.atlassian.com/browse/CONF-37975

Collapse comment: David Rizzuto added a comment - 09/Jul/2015 12:08 AM

David Rizzuto added a comment - 09/Jul/2015 12:08 AM

jsoderstrom, do we know if this is already in the wild? Does it affect 5.8.x instances too?

Expand comment: David Rizzuto added a comment - 09/Jul/2015 12:08 AM

David Rizzuto added a comment - 09/Jul/2015 12:08 AM jsoderstrom , do we know if this is already in the wild? Does it affect 5.8.x instances too?

Collapse comment: Jonas Soderstrom (Inactive) added a comment - 08/Jul/2015 11:57 PM

Jonas Soderstrom (Inactive) added a comment - 08/Jul/2015 11:57 PM

Two people have reported this, I am putting as blocker so it doesn't ship.

Expand comment: Jonas Soderstrom (Inactive) added a comment - 08/Jul/2015 11:57 PM

Jonas Soderstrom (Inactive) added a comment - 08/Jul/2015 11:57 PM Two people have reported this, I am putting as blocker so it doesn't ship.