Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-30473

External gadget cannot be added into Confluence with misleading error

      Summary

      Whenever an external gadget (not from Atlassian products) is added into Confluence, it doesn't work. Sniffing the error using firebug will reveal this error:

      "Requests to http://www.nonexistance.com/json/builders/ are not allowed. See your administrator about configuring a whitelist entry for this destination (http://confluence.atlassian.com/x/KQfCDQ )."
      

      However, the whitelist configuration had already been set to Allow all URLs. Therefore the error is somehow misleading.

      error in the logs

      2013-08-20 18:00:39,576 WARN [http-8436-4] [renderer.internal.http.HttpClientFetcher] fetch A request to http://www.nonexistance.com/json/builders/ has been denied.  To allow requests to this URL add the application URL to your whitelist (http://confluence.atlassian.com/x/KQfCDQ ).
       -- url: /confluence/plugins/servlet/gadgets/makeRequest | userName: admin | referer: http://localhost:8436/confluence/plugins/servlet/gadgets/ifr?container=atlassian&mid=141734051840&country=GB&lang=en&view=default&view-params=%7B%22writable%22%3A%22true%22%7D&st=atlassian%3A1KUXMudmWkVx3a%2FiHuowS2WgxOCr4taqOFSPHWqoVnS0EGVG%2BAegKTol%2B2dINQ9N98J11hrlW1eaCw409dIp2JvM7%2FCKPdk3N6JJnHv%2Fef%2BFHcuyQ0JPCcqBCOKEm9B%2Fqb7wkHv2DxE7xH0qto%2B5iN6LWtC66WTNdoPpDj13xVsGSljalrza5zL3%2BEPsVTX6EeQouQ%3D%3D&up_baseURL=http%3A%2F%2Fwww.nonexistance.com&up_category=&url=http%3A%2F%2Flocalhost%2Ftest.xml&libs=auth-refresh
      2013
      
      Steps to reproduce
      1. Host the external gadget's .xml file into Apache server. Confirm this by accessing the file through browser using http://localhost/test.xml.
      2. Add the gadget via gadget url into Confluence by Confluence Admin >> External Gadgets.
      3. Configure Whitelist to allow all URLs.
      4. Run Firebug in Firefox.
      5. Create a new page and try adding the gadget. Before saving it, click Refresh and note the error in Firebug

            [CONFSERVER-30473] External gadget cannot be added into Confluence with misleading error

            Minh Tran added a comment -
            Atlassian update

            Thank you for taking the time to raise, comment or vote on this Bug. Currently this bug indicates that it only impacts a version of Confluence which is no longer in support, therefore we are closing this issue as Timed Out.
            If this issue is still impacting you on a recent version please feel free to comment with the affected version. Any further details you may be able to provide regarding reproduction or impact of this issue may help us better address this issue.
            Thanks again.
            Regards,
            Confluence Development

            Minh Tran added a comment - Atlassian update Thank you for taking the time to raise, comment or vote on this Bug. Currently this bug indicates that it only impacts a version of Confluence which is no longer in support, therefore we are closing this issue as Timed Out. If this issue is still impacting you on a recent version please feel free to comment with the affected version. Any further details you may be able to provide regarding reproduction or impact of this issue may help us better address this issue. Thanks again. Regards, Confluence Development

            Raj Adluru added a comment -

            we are running confluence 5.8.10, this error is still coming in jira logs:

            2016-06-30 11:30:37,887 http-bio-8080-exec-3594 WARN usernamexxxx 690x8082852x9 oov6tc 10.189.20.130,127.0.0.1 /plugins/servlet/gadgets/makeRequest [renderer.internal.http.HttpClientFetcher] A request to has been denied. To allow requests to this URL add the application URL to your whitelist (http://confluence.atlassian.com/x/KQfCDQ ).

            Raj Adluru added a comment - we are running confluence 5.8.10, this error is still coming in jira logs: 2016-06-30 11:30:37,887 http-bio-8080-exec-3594 WARN usernamexxxx 690x8082852x9 oov6tc 10.189.20.130,127.0.0.1 /plugins/servlet/gadgets/makeRequest [renderer.internal.http.HttpClientFetcher] A request to has been denied. To allow requests to this URL add the application URL to your whitelist ( http://confluence.atlassian.com/x/KQfCDQ ).

            We're on 5.2.3 (upgraded from 4.3), problem persists. If it's confirmed fixed in 5.3, we'd be more than happy to upgrade to that.

            Kriss Andsten added a comment - We're on 5.2.3 (upgraded from 4.3), problem persists. If it's confirmed fixed in 5.3, we'd be more than happy to upgrade to that.

            shaffenden, I verified this on Confluence 4.3.6. Did another test on Confluence 5.3, but the error isn't there.

            Chung Park Chan added a comment - shaffenden , I verified this on Confluence 4.3.6. Did another test on Confluence 5.3, but the error isn't there.

            Hi cchan

            Thanks for raising this issue. Could you confirm the versions of Confluence that you have verified this issue on.

            Regards

            Steve Haffenden (Inactive) added a comment - Hi cchan Thanks for raising this issue. Could you confirm the versions of Confluence that you have verified this issue on. Regards

            This is seemingly a dupe of https://jira.atlassian.com/browse/CONF-15981 - which has been in the system for four and a half years getting fixed.

            While I understand the idea of voting for priority, this is broken core functionality and a blocker that I'd expect to get fixed without having to corral some kind of a virtual posse of +1's. If this is a bad assumption, may I ask what we're actually paying for in terms of the maintenance contract?

            Kriss Andsten added a comment - This is seemingly a dupe of https://jira.atlassian.com/browse/CONF-15981 - which has been in the system for four and a half years getting fixed. While I understand the idea of voting for priority, this is broken core functionality and a blocker that I'd expect to get fixed without having to corral some kind of a virtual posse of +1's. If this is a bad assumption, may I ask what we're actually paying for in terms of the maintenance contract?

              Unassigned Unassigned
              cchan Chung Park Chan
              Affected customers:
              1 This affects my team
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: