...
Pages for Bitbucket User Documentation - Click this link to open the user documentation on a separate browser tab.
Pages in personal repositories
Allow for groups - Select the Bitbucket groups that are allowed to enable pages for the personal repositories included in that group. Leave this field blank to disable pages in personal repositories
External Domain
Pages Domain - If an external domain is enabled, all pages become public. Configuring the Pages for Bitbucket Server to serve via an external domain allows you to host arbitrary Javascript and CSS without the risk of XSS vulnerabilities. See Using external domain for pages for more information.
Insecure JavaScript / HTML / CSS sanitization options
Project’s repositories -
Disable all insecure content - Render text content only. Does not include CSS and Javascript code.
Allow CSS only - Support CSS styling of pages. Does not include Javascript code from pages.
Allow all insecure content - Support both Javascript and CSS on the page, and use only with private or fully trusted repositories.
Personal repositories -
Inherit from projects repositories - Use the same settings as the one set in the Project repositories field.
Disable all insecure content - Render text content only. Does not include CSS and Javascript code.
Allow CSS only - Support CSS styling of pages. Does not include Javascript code from pages.
Allow all insecure content - Support both Javascript and CSS on the page, and use only with private or fully trusted repositories.
...