How to disable inserting image from URL?

[Aleš Laňar]

Hi there,

For security reasons we have to disable inserting image from remote URL. This is a way to get credentials from users. So anyone know how to disable it?

Thanks for advices,

Ales

[Paula Silveira · Accepted solution]

Hi Aleš,

1. Go to Confluence Admin > Configuration > Plugins > Show System Plugins. 
2. Find Confluence Paste in the list, and click it.
3. Click Manage Plugin Modules to see the full list of configurable modules for Autoconvert
4. The entire plugin can be disabled, or each module can be disabled individually. 

I believe the plugin you should disable is Autoconvert Skitch.

Please check the link https://confluence.atlassian.com/display/CONFKB/How+to+Turn+Off+Autoconvert for further information.

Hope this works for you.

[Aleš Laňar]

I couldn find it! Many thanks. And when I want to disable only inserting images from url, then should I disable Autoconvert Skitch?

[Paula Silveira]

"Automatic handling of Skitch "Share Image" URLs pasted into the page. (Transforms Skitch "Share Image" URLs into embedded images.)" Once you disable that module, only the URL which was copied will be shown. Please tell me what was not found. Weren't you able to see the Manage Plugin Module or weren't you able to find Autoconvert Skitch? Please check if you have administrator rights. Thanks.

[Aleš Laňar]

I am admin so i have access there. And i see all enabled modules for that, but i want disable only inserting images from web, other think I want to let enabled.

[Paula Silveira]

Do you see the button disable as the screenshot on https://confluence.atlassian.com/display/CONFKB/How+to+Turn+Off+Autoconvert? Are you able to select the module Autoconvert Skitch then disable?

[Aleš Laňar]

Ouu sorry, I wrote it bad. I couldnt find it before but now with your help I did it :) But what i dont know is that which module I should disable to disabled insert images from external website. Others functions (like inserting youtubes, converting jira links,etc..) I want to let enabled.

[Paula Silveira]

Disable only Autoconvert Skitch module. Don't change the others, and it will work for you.

[Aleš Laňar]

Perfect! Many thanks for you help!

[Adis]

Hi,
This only works if I paste a link within a page.
If I add a picture with "STRG+M" + "Images from the web" option. The security issue still persists.
Is there a way to disable this feature in general?

[nikolaev]

Hi,

we got Server version of Confluence.

And there is no Autoconvert Skitch module at Confluence Paste. How can we solve this issue for Confluence Server (7.1.0) ?

[Andrey Suray]

Hi
Any update on this?
Found https://jira.atlassian.com/browse/CONFSERVER-55015
and https://community.atlassian.com/t5/Confluence-questions/Prevent-Inserted-images-from-the-web/qaq-p/715696

[Delany]

Im on 7.9.0 server—none of the 10 modules of Confluence Paste plugin can be disabled