Rejecting security-sensitive request that bypassed Johnson filter: /secure/errors.jsp error?

[Ryan Robert Easton]

While clustering our Jira Service Management instances, we are receiving the following error in the logs when trying to access JSM: 

/secure/errors.jsp [c.a.jira.security.JiraSecurityFilter] Rejecting security-sensitive request that bypassed Johnson filter: /secure/errors.jsp

Jira Service Management is running but inaccessible. Can anyone assist in remediating this issue?

[Jeroen Poismans]

Hi!

I have found similar cases in the community and they all seem to boil down to one of two things:

• Corrupt plugin caches
• Permissions on filesystem

The cases:

https://community.atlassian.com/t5/Jira-questions/Unable-to-connect-to-jira-Get-error-503/qaq-p/811563

Since you are in clustered setup, plugin cache persists on multiple locations. So to clear that you migth want to refer to this:

https://confluence.atlassian.com/jirakb/how-to-clear-jira-data-center-server-plugin-cache-1157468195.html

For the file system permissions, make sure that the user starting the application is owner of the application-data folder and shared folders.

Jeroen