Shared Links Blueprint unusable - requires whitelisting!?!

Henning van Ackeren

The documentation of the feature promises:

"The Shared Links blueprint helps you take content from the web and share it with your team. You can use Shared Links to share and collaborate on web content, or to create a centralized repository of useful links."

Since a recent update it also says:

"To prevent people from accidentally or maliciously sharing links that may pose a security risk to your site, domains must be added to the whitelist, before they can be shared using the share a link blueprint."

And: "We strongly recommend not disabling the whitelist. "

 

We have used the feature for years and now the whitelist requirement makes the feature practically unusable.

Is every user who wants to share a website link expected ask an admin to add the domain to the whitelist, before?!? 

I hope I misunderstand something - can somebody enlighten me, please?

Shannon S

Hello Henning,

Thank you for contacting us about this. This was an update to the Shared Links Blueprint as of Confluence 6.15 release.

The intention is that your colleagues will only share pages from trusted sites, but I realize that for many, this is not a security concern and the whitelist is hindering your process.

I found that this concern has been brought up in the following feature request:

• CONFSERVER-58337 can you separate whitelist for Shared link in confluence?

The sentiment is the same as yours; that it's making the blueprint unusable for many. Thank you so much for your feedback and I would recommend following that case to be updated on this if anything changes regarding that in the future.

Regards,

Shannon