This is breaking our plugin in very bad ways and we are likely losing sales because of this.
Are there any workarounds for this behaviour? I have tried injecting a serlet filter, but it is not being invoked.
The plugin in question is https://marketplace.atlassian.com/plugins/com.spartez.jira.plugins.ephor-for-jira, but the behaviour can be trivially reproduced with any plugin that has a REST endpoint. Just log in as an SD 'customer' and go to plugin's REST endpoint