Issue Summary

Personal information shared in GET request : user name appearing in the GET request
http://localhost:8854/j854/secure/ChangePassword!default.jspa?username=USERNAME&inline=true&decorator=dialog&_=1595499363660

Steps to Reproduce

1. Login with Jira
2. Navigate to user profile
3. Change password
   The same user name is not appeared while performing Forget password from login screen

Expected Results

Username should not appear in the URL. Rather user name should be passed as a POST function rather than GET request.

Actual Results

Username appears in the URL and violets the GDPR compliance.

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available