Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-44574

Redirect requests that have a different HOST header than what JIRA is configured to serve for to the correct (configured) JIRA server url.

    XMLWordPrintable

Details

    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

    Description

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      There have been a number of security issues in non-atlassian software caused by using the HOST header of an incoming request. Therefore, this suggestion issue to request that when JIRA sees a request with a HOST header that does not match the instance's server url to redirect the request to the server url.

      Attachments

        Issue Links

          is related to

          Suggestion - CONFSERVER-39636 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Closed

          Suggestion - BSERV-9429 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Gathering Interest

          Suggestion - BAM-18112 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Gathering Interest

          Suggestion - CWD-4850 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Gathering Interest

          Suggestion - FE-6744 Redirect requests that have a different HOST header than what is configured to the correct (configured) server url.

          • Not Being Considered
          relates to

          Suggestion - JRACLOUD-44574 Redirect requests that have a different HOST header than what JIRA is configured to serve for to the correct (configured) JIRA server url.

          • Closed
          mentioned in

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              dblack David Black
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: