Info leak?

KentGran October 3, 2017

When adding a weblink to an issue in jira, jira adds an <img> reference to the favicon for the linked webpage.

If the favicon was fetched successfully users viewing the issue will also fetch the favicon from the web due to the added image. This creates an information leak of the current browser url through the http header referrer.

 

Is there any option to disable image/icons for weblinks or is possible to specify a fixed image for all weblinks ?

0 answers

Suggest an answer

Log in or Sign up to answer