-
Type:
Enhancement
-
Status:
Closed
-
Priority:
Critical
-
Resolution:
Done
-
-
-
Module:
BenAdmin
- Security
-
-
Item State:
Production Complete
- Closed
-
Issue Importance:
Must Have
All parameters are visible in browser when user view report.
Resolution:
We should encrypt report query string parameters so that user should not be able to manipulate reports.
{"report":{"apdex":1,"isInitial":true,"journeyId":"fb99cd2f-b26f-43d8-a3fe-44a062a56661","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":655.5,"redirectCount":0,"resourceLoadedEnd":697.6000000014901,"resourceLoadedStart":142,"resourceTiming":[{"duration":29.69999999552965,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":142,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":142,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":171.69999999552965,"responseStart":0,"secureConnectionStart":0},{"duration":29.900000005960464,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":142.19999999552965,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":142.19999999552965,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":172.10000000149012,"responseStart":0,"secureConnectionStart":0},{"duration":30.399999998509884,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":142.39999999850988,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":142.39999999850988,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":172.79999999701977,"responseStart":0,"secureConnectionStart":0},{"duration":34.600000001490116,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":142.39999999850988,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":142.39999999850988,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":177,"responseStart":0,"secureConnectionStart":0},{"duration":35,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":142.60000000149012,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":142.60000000149012,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":177.60000000149012,"responseStart":0,"secureConnectionStart":0},{"duration":82.89999999850988,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":142.60000000149012,"connectEnd":142.60000000149012,"connectStart":142.60000000149012,"domainLookupEnd":142.60000000149012,"domainLookupStart":142.60000000149012,"fetchStart":142.60000000149012,"redirectEnd":0,"redirectStart":0,"requestStart":142.60000000149012,"responseEnd":225.5,"responseStart":225.5,"secureConnectionStart":142.60000000149012},{"duration":120,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":142.89999999850988,"connectEnd":142.89999999850988,"connectStart":142.89999999850988,"domainLookupEnd":142.89999999850988,"domainLookupStart":142.89999999850988,"fetchStart":142.89999999850988,"redirectEnd":0,"redirectStart":0,"requestStart":142.89999999850988,"responseEnd":262.8999999985099,"responseStart":262.8999999985099,"secureConnectionStart":142.89999999850988},{"duration":122.69999999552965,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":143,"connectEnd":143,"connectStart":143,"domainLookupEnd":143,"domainLookupStart":143,"fetchStart":143,"redirectEnd":0,"redirectStart":0,"requestStart":143,"responseEnd":265.69999999552965,"responseStart":265.69999999552965,"secureConnectionStart":143},{"duration":123.29999999701977,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":143,"connectEnd":143,"connectStart":143,"domainLookupEnd":143,"domainLookupStart":143,"fetchStart":143,"redirectEnd":0,"redirectStart":0,"requestStart":143,"responseEnd":266.29999999701977,"responseStart":266.29999999701977,"secureConnectionStart":143},{"duration":123.5,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":143.19999999552965,"connectEnd":143.19999999552965,"connectStart":143.19999999552965,"domainLookupEnd":143.19999999552965,"domainLookupStart":143.19999999552965,"fetchStart":143.19999999552965,"redirectEnd":0,"redirectStart":0,"requestStart":143.19999999552965,"responseEnd":266.69999999552965,"responseStart":266.69999999552965,"secureConnectionStart":143.19999999552965},{"duration":123.80000000447035,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":143.29999999701977,"connectEnd":143.29999999701977,"connectStart":143.29999999701977,"domainLookupEnd":143.29999999701977,"domainLookupStart":143.29999999701977,"fetchStart":143.29999999701977,"redirectEnd":0,"redirectStart":0,"requestStart":143.29999999701977,"responseEnd":267.1000000014901,"responseStart":267.1000000014901,"secureConnectionStart":143.29999999701977},{"duration":124.20000000298023,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":143.39999999850988,"connectEnd":143.39999999850988,"connectStart":143.39999999850988,"domainLookupEnd":143.39999999850988,"domainLookupStart":143.39999999850988,"fetchStart":143.39999999850988,"redirectEnd":0,"redirectStart":0,"requestStart":143.39999999850988,"responseEnd":267.6000000014901,"responseStart":267.6000000014901,"secureConnectionStart":143.39999999850988},{"duration":124.59999999403954,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":143.60000000149012,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":143.60000000149012,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":268.19999999552965,"responseStart":0,"secureConnectionStart":0},{"duration":124.59999999403954,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/e80c7a6aee0fa86c2b1a716575a614aa/shortcuts.js?context=issuenavigation&context=issueaction","startTime":143.60000000149012,"connectEnd":143.60000000149012,"connectStart":143.60000000149012,"domainLookupEnd":143.60000000149012,"domainLookupStart":143.60000000149012,"fetchStart":143.60000000149012,"redirectEnd":0,"redirectStart":0,"requestStart":143.60000000149012,"responseEnd":268.19999999552965,"responseStart":268.19999999552965,"secureConnectionStart":143.60000000149012},{"duration":125,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":143.79999999701977,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":143.79999999701977,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":268.79999999701977,"responseStart":0,"secureConnectionStart":0},{"duration":124.89999999850988,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":143.89999999850988,"connectEnd":143.89999999850988,"connectStart":143.89999999850988,"domainLookupEnd":143.89999999850988,"domainLookupStart":143.89999999850988,"fetchStart":143.89999999850988,"redirectEnd":0,"redirectStart":0,"requestStart":143.89999999850988,"responseEnd":268.79999999701977,"responseStart":268.79999999701977,"secureConnectionStart":143.89999999850988},{"duration":233.79999999701977,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":144.5,"connectEnd":144.5,"connectStart":144.5,"domainLookupEnd":144.5,"domainLookupStart":144.5,"fetchStart":144.5,"redirectEnd":0,"redirectStart":0,"requestStart":144.5,"responseEnd":378.29999999701977,"responseStart":378.29999999701977,"secureConnectionStart":144.5},{"duration":323.09999999403954,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":144.60000000149012,"connectEnd":144.60000000149012,"connectStart":144.60000000149012,"domainLookupEnd":144.60000000149012,"domainLookupStart":144.60000000149012,"fetchStart":144.60000000149012,"redirectEnd":0,"redirectStart":0,"requestStart":144.60000000149012,"responseEnd":467.69999999552965,"responseStart":467.69999999552965,"secureConnectionStart":144.60000000149012},{"duration":138.20000000298023,"initiatorType":"xmlhttprequest","name":"https://jira.workterra.net/rest/webResources/1.0/resources","startTime":435.8999999985099,"connectEnd":435.8999999985099,"connectStart":435.8999999985099,"domainLookupEnd":435.8999999985099,"domainLookupStart":435.8999999985099,"fetchStart":435.8999999985099,"redirectEnd":0,"redirectStart":0,"requestStart":435.8999999985099,"responseEnd":574.1000000014901,"responseStart":574.1000000014901,"secureConnectionStart":435.8999999985099}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":55,"responseStart":136,"responseEnd":137,"domLoading":139,"domInteractive":704,"domContentLoadedEventStart":704,"domContentLoadedEventEnd":760,"domComplete":886,"loadEventStart":887,"loadEventEnd":890,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"d6e1ace32de69d","effectiveType":"4g","downlink":9,"rtt":0,"serverDuration":31,"dbReadsTimeInMs":2,"dbConnsTimeInMs":3,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
We are working on encrypting parameters of Reports.