Run Confluence over SSL. Major browsers do not send the HTTP_REFERER when you are linking from an https:// site to an http:// site.
To run confluence on SSL please refer to Adding SSL for Secure Logins and Page Security.

Additional Information

Severity

Medium

Regular Expression

 
[Hh]ide the referrer

Article ID

CONFKB











{htmlcomment}
http://support.atlassian.com/browse/CSP-19345 
{htmlcomment}