Hello,
Why has the ability to add HTML directly into Confluence pages disappeared? Was it removed on purpose, and is there any chance it will return in the future?
Hi Louis,
HTML Macro is indeed removed from Confluence Cloud. Security was a major concern for this removal and rightly so.
We have built an alternative app for cloud, aptly named HTML Macro for Confluence
We were able to address majority of security concerns with added security features built into the app (with iframe sandboxing, IP/domain allowlisting, etc.).
You might want to try it out. It also supports migration from HTML Macro in DC.
There are also other similar apps in the Marketplace; check them out here.
Hello @Louis
This really comes down to a security and platform limitation. Confluence Data Center does have an HTML macro, but even there, it's turned off by default. Letting users drop in arbitrary HTML or JavaScript just opens up way too many security risks, especially when it comes to cross-site scripting (XSS).
I don’t expect this to ever be available without an app that provides a sandboxed macro.
Best,
Arkadiusz
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.