Run Confluence over SSL. Major browsers do not send the HTTP_REFERER when you are linking from an https:// site to an http:// site.
To run confluence on SSL please refer to Adding SSL for Secure Logins and Page Security.

Additional Information

Severity

Medium

Regular Expression

 [Hh]ide the referrer

Article ID

CONFKB269985112


Unknown macro: {htmlcomment}

http://support.atlassian.com/browse/CSP-19345

Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 2.5 Australia License.