ATST data redaction missing hostnames in application.xml

XMLWordPrintable

    • 11.03
    • 1
    • Severity 3 - Minor
    • 2

      Issue Summary

      The ATST plugin has a new feature that allows Support Zips to redact sensitive data within the log files.
      There are instances where it misses anonymizing hostnames in the application.xml file.

      Steps to Reproduce

      1. Install ATST 3.13.1
      2. Add links in the Application Navigator
      3. Generate a Support Zip with Redact data enabled.
      4. Review application.xml

      Expected Results

      All hostnames should be redacted in the application.xml file.

      Actual Results

      Hostnames are not redacted under com.atlassian.plugins.custom_apps.customAppsAsJSON and ATL_PROXY_NAME sections of application.xml:

      <com.atlassian.plugins.custom_apps.customAppsAsJSON>
      [{&amp;quot;applicationType&amp;quot;:&amp;quot;jira&amp;quot;,&amp;quot;hide&amp;quot;:false,&amp;quot;displayName&amp;quot;:&amp;quot;https://test-internal.com&amp;quot;,&amp;quot;editable&amp;quot;:true,&amp;quot;self&amp;quot;:false,&amp;quot;id&amp;quot;:&amp;quot;4&amp;quot;,&amp;quot;url&amp;quot;:&amp;quot;https://test-internal.com&amp;quot;,&amp;quot;allowedGroups&amp;quot;:[]},
      {&amp;quot;applicationType&amp;quot;:&amp;quot;jira&amp;quot;,&amp;quot;hide&amp;quot;:false,&amp;quot;displayName&amp;quot;:&amp;quot;https://test-jira.com&amp;quot;,&amp;quot;editable&amp;quot;:true,&amp;quot;self&amp;quot;:false,&amp;quot;id&amp;quot;:&amp;quot;2&amp;quot;,&amp;quot;url&amp;quot;:&amp;quot;https://test-jira.com&amp;quot;,&amp;quot;allowedGroups&amp;quot;:[]},
      {&amp;quot;applicationType&amp;quot;:&amp;quot;jira&amp;quot;,&amp;quot;hide&amp;quot;:false,&amp;quot;displayName&amp;quot;:&amp;quot;https://test.com&amp;quot;,&amp;quot;editable&amp;quot;:true,&amp;quot;self&amp;quot;:false,&amp;quot;id&amp;quot;:&amp;quot;3&amp;quot;,&amp;quot;url&amp;quot;:&amp;quot;https://test.com&amp;quot;,&amp;quot;allowedGroups&amp;quot;:[]}]

</com.atlassian.plugins.custom_apps.customAppsAsJSON>

      For Helm Chart deployments of Jira Data Center with a reverse proxy, the hostname is not redacted:

      <ATL_PROXY_NAME>

server-123456.test.abc-fg.net

</ATL_PROXY_NAME>

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

              Assignee:
              Kushagra
              Reporter:
              Adrian Castillo
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: