Skip to content

AXON-1869: Stop fetching external images#1576

Merged
jwang19-atlassian merged 4 commits intomainfrom
axon-1869-ssrf-jira-image-issue
Feb 5, 2026
Merged

AXON-1869: Stop fetching external images#1576
jwang19-atlassian merged 4 commits intomainfrom
axon-1869-ssrf-jira-image-issue

Conversation

@jwang19-atlassian
Copy link
Contributor

@jwang19-atlassian jwang19-atlassian commented Feb 5, 2026

What Is This Change?

There is a vulnerability exposed here
https://atlassian.slack.com/archives/C07TU1NSUCE/p1770226313445609

Add a break to stop fetching external images in Jira issue page

How Has This Been Tested?

Basic checks:

  • npm run lint
  • npm run test

Rovo Dev has reviewed this pull request
Any suggestions or improvements have been posted as pull request comments.

@atlassian
Copy link
Contributor

atlassian bot commented Feb 5, 2026

The issue is ready for review, and the below acceptance criteria have been met:

  • ✅ Determine if the current behavior of skipping external domain images is expected.
  • ✅ Investigate and implement a fix if the behavior is not expected.

Code Reviewer could not determine whether the following acceptance criteria have been met:

  • Verify if the VSCode extension skips fetching images from external domains on Jira tickets.

Check Jira issue

cabella-dot
cabella-dot previously approved these changes Feb 5, 2026
cabella-dot
cabella-dot previously approved these changes Feb 5, 2026
@atlassian
Copy link
Contributor

atlassian bot commented Feb 5, 2026

The issue is ready for review.

The below acceptance criteria have not been met:

  • ❌ Investigate and implement a fix if the behavior is not expected.

Code Reviewer could not determine whether the following acceptance criteria have been met:

  • Verify if the VSCode extension skips fetching images from external domains on Jira tickets.
  • Determine if the current behavior of skipping external domain images is expected.

Check Jira issue

@atlassian
Copy link
Contributor

atlassian bot commented Feb 5, 2026

The issue is ready for review, and the acceptance criteria have been met:

  • ✅ Verify if the VSCode extension skips fetching images from external domains on Jira tickets.
  • ✅ Determine if the current behavior of skipping external domain images is expected.
  • ✅ Investigate and implement a fix if the behavior is not expected.

Check Jira issue

@jwang19-atlassian jwang19-atlassian merged commit 3888dfb into main Feb 5, 2026
13 checks passed
@jwang19-atlassian jwang19-atlassian deleted the axon-1869-ssrf-jira-image-issue branch February 5, 2026 23:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants