HTML for Confluence - version 5.6 is now a Data Center approved app for the Atlassian Marketplace. In addition to being Data Center compatible, HTML for Confluence is now a tested and verified app that complies with Data Center scalability and availability standards. This ensures delivering a high standard of reliability in a cluster and performance at scale.

Additional Notes

Administrators can choose to blacklist a pre-defined list of private networks, hosts or subnets to avoid Server Side Request Forgeries (SSRF) using the Blacklist domains configuration option. This feature comes in handy when deploying your instance to any Cloud platform such as Amazon Web Services (AWS), Microsoft Azure, and so on.

By default, this option is disabled. If enabled, and if a request from any of the blacklisted sites is received, an error message is displayed. However, if users still need to access a blacklisted site, they must contact their system administrator to disable this option. Click the link named listed (in the description beneath the option) to view the pre-defined list of the most commonly blacklisted domains in a pop-up window.

Image Added

Anchor
Enhanced_XSS_security Enhanced_XSS_security

Enhanced security against XSS vulnerabilities

This app version now provides enhanced security to handle any cross-site scripting from the macros.

Image Modified