Features

• Supports capabilities for including data similar to other scripting macros.
• Supports find and replace for adjusting resulting output.
• Allows administrators to restrict the usage of Javascript in the HTML macro (based on Allow JavaScript in Configuration settings). The Confluence page throws a rendering error if this parameter is not enabled, and Javascript is inserted while using the macro.

Parameters

Macro security and macro parameter settings

This section explores how the script global setting along with the parameter settings (Allow same origin and Allow script execution) affects the content in the macro. To learn more about the macro security configurations, see the Configuration page.

The following table explains this co-relation:

Points to remember

• If the global app configuration Allow JavaScript parameter is enabled, it overrides any settings made to the Allow script execution or Allow same origin parameters. This is the default behaviour. This ensures that scripts are executed and content is rendered.
• If macro security restrictions are set, the pages which have the HTML macro must have the same space/user/group restrictions to render the content. If not done, a warning message is displayed to apply these restrictions to proceed.
• Warning messages are displayed if restricted user/group tries to access a trusted space and the content is not rendered.

Examples

The following examples show how you can use the macro to render HTML content:

• HTML from an attachment
  

  {html:script=^example.html}
  {html}
  

• HTML from an URL
  

  {html:script=#http://localhost/example.html}
  {html}
  

• Use of CSS inline style sheet
  

  {html}
  <P style="font-size: x-large; color: #8000">
     Using inline style sheets - or is that inline styles?
  </p>
  {html}