I have a Confluence 6.6.9 server installation and I have turned on Anonymous access in the Global permissions. I only want to make a few spaces accessible to Anonymous users and that part works fine.
But if an anonymous user puts in a few letters into the search box, they get the titles of images what have those letters in them. If they click on a search result, they are taken to the login screen, so they can't actually see the image.
But the images are the avatar images of confluence users and this would be a security concern, letting people see the names of people in the company. Currently all Confluence users who have personal spaces have the Anonymous permission turned off, so I'm not sure what other setting I would need to set to prevent image filenames from showing to anonymous users.
Thanks for your help!