Problem Definition

Confluence whitelist is case sensitive for domains.

Suggested Solution

The Whitelist could parse the domains to lower-case automatically, replicating what browsers do when you type a domain with upper-case letters. Preferably, it would be case insensitive for domains to match the RFC 4343 specification.

Why this is important

If a domain with upper-case letters is added to the whitelist, requests with the same domain but in all lower-case letters will be blocked. Example:

1. Create an application link to the domain Company.com
2. An automatic entry for Company.com will be added to the whitelist
3. Trying to add an RSS feed with company.com will fail as the source is not allowed
4. Changing the feed to use Company.com will work as expected

This can cause confusion as users are familiarized to the browser's behavior of parsing the domain to lower-case.

Workaround

Add a separate entry to the whitelist with all lower-case letters.