1. Instant Search Avatar Instant Search
  2. Instant Search
  3. instant-search
  4. Issues

Open Redirect

Issue #3 resolved
Former user created an issue

hi, any chance to avoid open redirects on instant-search?

https://www.domain.com/plugins/servlet/ZFIN.instantsearch/track?searchlink=http://google.com

https://detectify.freshdesk.com/support/solutions/articles/48001048961-open-redirect

Comments (6)

  1. Instant Search repo owner

    Thanks for reporting. I’ll make sure to validate the URL to make sure its internal / allowed versus the entire world.

  5. Instant Search repo owner

    @Gereon Heitmann This should be fixed in 2.5.5 of Confluence Server. It will track it explicitly but will provide a warning instead of the redirect. Please let me know if there is anything else.

  7. Log in to comment
Assignee
–
Type
bug
Priority
critical
Status
resolved
Votes
0
Watchers
2
Jira: the preferred issue tracker for Bitbucket. Join the team!