Open
Description
Describe the bug
In comments throughout the codebase there are references to Jira tickets.
Could potentially make it easier for someone to craft a phishing email.
Examples that are referenced:
SEARCHQUAL-8907
CX-2024
SD-14439
SEARCH-7329
APPSEC-2303
To Reproduce
Steps to reproduce the behavior:
- Click into the github search tool in the top left
- Search for any of the tickets above
- Observe the result
Expected behavior
Ideally the internal project names would not be exposed
Additional context
Possibly you should manually evaluate the comments as they might not get read by your analysis tools