Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-40640

Add system property to allow for whitelisting domain(s) when clickjacking protection is disabled

XMLWordPrintable

    • 2
    • 5
    • We collect Confluence feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion.

      Currently in Confluence Cloud it's possible to turn clickjacking protection off (with the confluence.clickjacking.protection.disable) if customers want to embed their Confluence pages in their own portal. This isn't very safe, so it would be good to have an additional property to allow for setting the X-FRAME-OPTIONS ALLOW-FROM <domain> header to whitelist just the customer's portal domain.

            [CONFSERVER-40640] Add system property to allow for whitelisting domain(s) when clickjacking protection is disabled

            James Whitehead made changes -
            Fix Version/s Original: 9.0.0 [ 106328 ]
            James Whitehead made changes -
            Fix Version/s New: 9.0.1 [ 108911 ]
            Kusal Kithul-Godage made changes -
            Fix Version/s New: 8.9.1 [ 107890 ]
            Fix Version/s New: 8.5.9 [ 107992 ]
            Fix Version/s New: 9.0.0 [ 106328 ]
            Kusal Kithul-Godage made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Waiting for Release [ 12075 ] New: Closed [ 6 ]
            Kusal Kithul-Godage made changes -
            Status Original: In Progress [ 3 ] New: Waiting for Release [ 12075 ]
            Kusal Kithul-Godage made changes -
            PM Reviewed New: 16/Apr/2024
            QA Kickoff Status New: Not Needed [ 14236 ]
            Status Original: Gathering Interest [ 11772 ] New: In Progress [ 3 ]
            Kusal Kithul-Godage made changes -
            Link New: This issue is resolved by CONFSRVDEV-31105 [ CONFSRVDEV-31105 ]
            SET Analytics Bot made changes -
            UIS Original: 1 New: 2
            SET Analytics Bot made changes -
            UIS Original: 2 New: 1
            SET Analytics Bot made changes -
            UIS Original: 1 New: 2

              Unassigned Unassigned
              nmason Nick Mason
              Votes:
              29 Vote for this issue
              Watchers:
              26 Start watching this issue

                Created:
                Updated:
                Resolved: