Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Image RemovedImage Added

ParameterDescription
Disable secure processingThis parameter is available with version 5.1.0, and helps to control secure XSL processing. This parameter will allowallows/disallow disallows XSLT macros to use all XSLT features including external entity resolution.
Restrict URL access

This parameter is available with version 5.3.0. This parameter controls whether or not the url parameter on the HTML for Confluence macro must conform to the Confluence Whitelist provided whitelisting is enabled.

Confluence allows the administrator to turn on whitelisting to restrict incoming and outgoing connections to only those connections that are configured in the Whitelist settings. By enabling this option, the url parameter for the HTML for Confluence macro is also restricted to only URLs that are configured in the Whitelist settings for Confluence.

Allow JavaScript

This parameter is available with version 5.4.0. This This option controls the usage of Javascript of Javascript in the HTML macro. When enabled, the user can use Javascript use Javascript in the HTML and vice versa.

Note

You can also control Javascript usage on pages that are using the HTML macro by enabling the html.allowJavascript macro in the Macro the Macro Security for Confluence Configuration page. To know how to enable this macro, refer to Macro Security Configuration.


Blacklist domains

This parameter is available with version 5.6.0. This option controls whether or not certain domains are blacklisted. By default, this option is disabled for backward compatibility.

If enabled, and if a request from any of these sites is received, an error message is displayed. However, if users still need to access a blacklisted site, they must contact their administrator to disable this option. Click the link named listed (in the description beneath the option) to view a pre-defined list of the most commonly blacklisted domains in a pop-up window. The following sites are blacklisted, by default:

  • 10.0.0.0/8
  • 100.64.0.0/10
  • 127.0.0.0/8
  • 169.254.0.0/16
  • 172.16.0.0/12
  • 192.168.0.0/16
  • 192.0.0.0/24
  • 198.18.0.0/15
  • 255.255.255.255/32
  • 0.0.0.0/32
Help Us Improve the ProductThis parameter is available with version 5.4.0. When enabled, this option allows  this option allows us to collect some usage data that helps us improve our product. To learn more about what is being sent, refer to Analytics data.