On /secure/admin/jira/EditApplicationProperties!default.jspa, for the "Internet Explorer MIME Sniffing Security Hole Workaround Policy", we reference JRA-10862 which is not publicly visible. Per the discussion on JRA-10862 JIRA should rather reference the security advisory, just as the docs do.