osTicket/osTicket-1.7 — pull request #12 by greezybacon (2012-03-21 22:07:05+00:00)
Title: Conceal Original HTTP Referrer

Change href definitions for embedded links in the ticket thread so that the click will be bounced through a script. This will hide the original referrer URL where the link originated.

Fixes (yet-unreleased) SVA-2012-321 (information disclosure) osTicket leaks login information in the URL query string when following links made clickable in the ticket thread