Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Warning
titleRemoval notice

Please note that the URL user and URL user password parameters were removed (see Deprecation notice: URL user and URL user password parameters). We recommend using profiles to access external data.

...

Use the toggle to enable or disable the Global Configuration settings.

Image RemovedImage Added

ParameterDescription
Anchor
HTML_Cld_GlobalConfig_RestrictURL
HTML_Cld_GlobalConfig_RestrictURL
Restrict URL access

This parameter controls whether or not the URL parameter on the HTML for Confluence macro must conform to the allowlisted URLs. Administrators can turn on the Allowlist to restrict access to URLs configured in the Allowlist settings

If enabled, the URL parameter in the app is restricted to only the URLs available in the Allowlist tab.

Enable strict allowlist

This option will apply the URL Allowlist to all content in the HTML content. Note that this feature disables any nested iframes and does not support allowlist entries with regular expressions.

Note

The Allowlist is shared between Appfire and/or Bob Swift applications. 


Allow JavaScript

This option controls the usage of Javascript in the HTML macro. When enabled, the user can use Javascript in the HTML and vice versa.

Help us improve the productEnabling this option reports usage data that helps us improve the app continually. The app does not send any private user data or personally identifiable information. To learn more about what is being sent, refer to Analytics data.

Anchor
HTML_Cld_Whitelist
HTML_Cld_Whitelist
Allowlist

Manage the URLs that the app can access from this page. If the Restrict URL access option is enabled, the app is restricted to allow the specified URLs only.

Image RemovedImage Added

ParameterDescription
ExpressionEnter a URL or an expression here.
Type

Select a type from the following list:

  • Domain name - allows URLs of a specific domain. Example: https://www.example.com/.
  • Exact match - allows only the specified URL. Example: https://www.example.com/thispage.
  • Wildcard expression - allows all matching URLs. Use * as a wildcard character to replace one or more characters. Example: https://*example.com.
  • Regular expression - allows all URLs matching the specified regular expression. Example: http(s)?://www\.example\.com. 
    Refer to this link for more information about regular expressions.

...

  • Profiles allow user authentication required by some URLs to be hidden from page viewers and editors. Only Confluence administrators have access to this information.
  • Enables macro editors to quickly configure the macro by reusing a shared definition for URL access. 
  • Relative addressing can be used making the page content less likely to require changes when base URLs are relocated. 
    • Macro configured URL (that is not a full URL) is appended to the profile provided URL.

Image RemovedImage Added

The page displays a list of profiles available for the macros. Click Add Profile to open a pop-up window as:

...

Administrators can define how they want to restrict the usage of macros and macro parameters using macro security. These restrictions are applied through a combination of app configuration (macro security), macro parameters and page restrictions.

Image RemovedImage Added

Click Add restriction to specify the trusted users, user groups and/or spaces that can access the HTML macro.

...