Summary

A number of years ago, Confluence implemented more security controls to enable Administrators to restrict some content and support anti-XSS measures. SQL supported these measures and has enabled the ability to control what is allowed.

Details

If your site administrator has enabled anti-XSS support in Confluence global security settings, then some SQL queries with HTML content may not display as desired. Normally, it is easiest to construct queries that use Wiki output for advanced features like linking and other Confluence features. However, if you need to use HTML (output=html) then you need to consider how to enable that. For instance, an html link like <a href=http://google.com>google</a> may not display as a link. There are 2 primary ways to enable this:

1. Globally: Administrator goes into the SQL add-on Configure section and to globally disable anti-XSS support for HTML content produced by the SQL macros. 
2. On specific macro use: Use Macro Security for Confluence and authorize usage of the disableAntiXss parameter to trusted users.