nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Help regarding the New vulnerability voilation in SLA

Ramkumar Pandian

Hi,

We have few questions

1) We received a vulnerability report on the Security dashboard and we went through the below document to do the fix
https://community.developer.atlassian.com/t/action-required-atlassian-connect-vulnerability-allows-bypass-of-app-qsh-verification-via-context-jwts/47072
2) We are not using Atlasian connect express (ACE), in our atlassian-connect.json
3) As said in the above url is it enough to add "apiMigrations": { "context-qsh": true } alone in the atlassian-connect.json or do we need to add the addon.authenticate(true) in the endpoints. How to decode context-qsh

Comments

Ramkumar Pandian

Hi,

Can anyone help us on the above questions

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

sla