iframe macro fails encoding/decoding "&" / "&&" parameter delimiter

[Hovawart]

Hi,

I have the following question/problem. The Atlassian Support referred me to you.

Iframe macros with "&" parameters in target url are not encoded/decoded correctly when sent to server. This worked completly fine some days ago, so it must be broken recently.

example:

1. embed a iframe macro in a page
2. enter url:

https://www18.prozessplattform.de/support/apps/current/prime/viewer.html?workspaceUUID=bb5c73e8-35f7-4210-b481-91a57bb2e488&bpmnModelUUID=5e32c832-5315-4596-bf0d-33bdad233c33&authToken=bda06e3b-7c9d-459d-a3c6-bb102dba08fc&attributeViewUUID=f1fd8ffe-8b66-44cf-81f7-b3e89a816b51&displayHeader=true&displayPrintButton=true

3. save the page

4. problem: the content of the iframe is not rendered because the parameters in the url that is sent to the server are not correct (note: he might be asking for a login. thats is because the url parameters that provide access without login do not work)

analysis:

when viewing the page (e.g. with chrome) in dev mode watching the network tab you can see that in the request that is sent to the server the "&" parameter delimiters are encoded as "&" this encoding is correct when embedding a link in html but not when sending urls

paste the target link above into any browser url and you will see a working process chart

paste this url(what the iframe macro is setting as src-attribute) and it is not working:

https://www18.prozessplattform.de/support/apps/current/prime/viewer.html?workspaceUUID=bb5c73e8-35f7-4210-b481-91a57bb2e488&bpmnModelUUID=5e32c832-5315-4596-bf0d-33bdad233c33&authToken=bda06e3b-7c9d-459d-a3c6-bb102dba08fc&attributeViewUUID=f1fd8ffe-8b66-44cf-81f7-b3e89a816b51&displayHeader=true&displayPrintButton=true

[Rafael Franco]

Hi Tim,

My name is Rafael Franco and I'm the Tech Lead of the Product Team here at Adaptavist. First of all, thanks for using Content Formatting for Confluence.

I believe your problem is due to the url being https and a limitation of using https on iFrames. More information here:

https://www.adaptavist.com/doco/display/CFP/Content+Formatting

"If your Confluence is running on http then use of http in iframe will be fine. Although if your Confluence is accessed via https then use of http in iframes won't work - it's a security feature of browsers."

Regards,

Rafael

[Hovawart]

Hi Rafael,

my Confluence is running on https and so is the embedded site. So there shouldn't be a problem?

This same setup worked fine until some days ago.

Regards,

Tim

[Rafael Franco]

Tim, could you please open a support ticket in our portal?

https://productsupport.adaptavist.com/servicedesk/customer/portal/5

Thanks