Hello,
Why has the ability to add HTML directly into Confluence pages disappeared? Was it removed on purpose, and is there any chance it will return in the future?
Hello @Louis
This really comes down to a security and platform limitation. Confluence Data Center does have an HTML macro, but even there, it's turned off by default. Letting users drop in arbitrary HTML or JavaScript just opens up way too many security risks, especially when it comes to cross-site scripting (XSS).
I don’t expect this to ever be available without an app that provides a sandboxed macro.
Best,
Arkadiusz
Hi @Louis
Arkadiusz has the technical side exactly right: Atlassian removed the native HTML macro from Confluence Cloud because allowing arbitrary HTML and JavaScript injection opens serious cross-site scripting (XSS) risks. That's why it's unlikely to come back natively without a sandboxed solution.
If you need to embed custom HTML into your Confluence Cloud pages today, Marketplace apps handle this safely via a sandboxed iframe. One option worth knowing about is AURA Content Formatting Macros:
If you're open to a Marketplace app, you can check it out here: AURA Content Formatting Macros
Full disclosure: I work at Seibert Group, the team behind the Aura Apps.
Hope this helps, and best of luck!
Joshua
Content Writer & US Representative
Agile Hive & Aura Apps (products of Seibert Group GmbH)
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi @Louis
The native HTML macro was retired on Cloud with no built-in replacement. Raw HTML now has to come through a vendor macro that sandboxes it.
Adding to what Arkadiusz sent, our app Just Add+ includes an HTML macro that renders raw HTML via iframe sandboxing. It accepts inline, attachment, or remote URL input. It also covers Markdown, diagrams, and Swagger on the same page.
Feel free to reach out if you'd like to learn more.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Louis,
HTML Macro is indeed removed from Confluence Cloud. Security was a major concern for this removal and rightly so.
We have built an alternative app for cloud, aptly named HTML Macro for Confluence
We were able to address majority of security concerns with added security features built into the app (with iframe sandboxing, IP/domain allowlisting, etc.).
You might want to try it out. It also supports migration from HTML Macro in DC.
There are also other similar apps in the Marketplace; check them out here.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.