Issue Summary

When a Jira Admin visits the System Info Page /secure/admin/ViewSystemInfo.jspa

There exists a resource on this page that shows Jira's Java heap size and a link that allows you to "Force Garbage Collection'.  When trying to click this link in Jira 8.2.3 it does not work.

Environment

• Jira 8.2.3
• Tested against multiple browsers, Firefox 67.0.4, Chrome 75.0.3770.100 same results

Steps to Reproduce

1. Login to Jira as a system admin
2. Navigate to /secure/admin/ViewSystemInfo.jspa
3. Scroll down to Java VM Memory Statistics
4. Try to click the link for Force garbage collection

Expected Results

Garbage collection is run against the heap.

Actual Results

1. User gets an XRSF error page displayed
2. GC does not run
   
3. Logs show

   2019-07-12 10:16:23,524 http-nio-8823-exec-15 INFO admin 616x2143x1 23zdgm 0:0:0:0:0:0:0:1 /secure/admin/ViewSystemInfo!garbageCollection.jspa [c.a.j.web.action.XsrfErrorAction] The security token is missing for 'admin'. The browser has provided ZERO parameters.  Probably BUG! User-Agent : 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36'
   

Notes

This works correctly in Jira 7.13

Workaround

• No way to work around this from within Jira itself.
• However you could still force the JVM to perform a garbage collection event.  More details in How to manually force a full garbage collection in Confluence - Atlassian Documentation (while this KB was created for Confluence, the steps can be applied to Jira in the same way)