Features

• Renders HTML content.

• Renders XSLT content; transforms XML into HTML, XHTML, or wiki markup via XSLT scripting.

• Find and replace support to make on the fly repairs.

• Macros can be secured for use by trusted users by using Macro Security for Confluence (Server/Data Center only).

• JTidy support - allows malformed HTML to be cleaned so content displays properly (Server/Data Center only).

• Access content to be rendered or transformed from multiple sources from the macro body, attachments, URLs, and more.

Security

HTML and XSLT provide opportunities for untrusted users to do undesirable things if they have the ability to create or edit pages or comments or provide other content referenced by these macros.

If you do not have a completely trusted server or data center environment, you must implement and configure Macro Security for Confluence to restrict the use of these macros. We recommend restricting access to confluence-administrators only.

With the cloud version, administrators must manually configure a list of URLs that the app can access to render content. Read more about allowlisting URLs in the Configuration settings page.