Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-45702

Windows 10 - IE 11 - Confluence does not render navigation bar icons

      On Windows 10, using IE 11 specifically, icons are missing from the navigation bar (see attached screenshot). All other browsers and Operating Systems will not exhibit this behavior.

      Environment

      • OS - Windows 10
      • Browser - IE11
      • Database - MS SQL
      • Confluence - 6.0.x, 5.10.x (Since this issue is related to Windows Policy, it will occur on any version that has untrusted fonts)

      Steps to reproduce

      1. Install Confluence on a Windows 10 machine
      2. IE 11 is installed on Windows 10, you can search for IE to open the browser
      3. Log into Confluence
      4. Along the navigation bar, you will notice the icons are missing

      Expected Results

      Icons appear in the navigation bar

      Actual Results

      Icons are missing (please see screenshot)

      Failed Resolution Steps

      • Adding Font CSS - Styling Fonts in Confluence
      • To fix your apps by installing the problematic fonts (recommended)

        On each computer that has the app installed, right-click the font name, and then click Install.

        The font should automatically install into your %windir%/Fonts directory. If it does not, you have to manually copy the font files into the Fonts directory and run the installation from there.

      Cause

      Windows 10 has a default security feature that blocks certain fonts: https://support.microsoft.com/en-us/kb/3053676

      Workaround 1

      Disable this feature:

      Using Group Policy
      1. Open Local Group Policy Editor.
      2. Under Local Computer Policy, expand Computer Configuration, expand Administrative Templates, expand System, and then click Mitigation Options.
      3. In the Untrusted Font Blocking setting, you can see the following options:
        • Block untrusted fonts and log events
        • Do not block untrusted fonts
        • Log events without blocking untrusted fonts
      Using Registry Editor
      1. Open Registry Editor (regedit.exe) and go to the following registry subkey:
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\
      2. If the MitigationOptions key is not there, right-click and add a new QWORD (64-bit) Value, naming it as MitigationOptions.
      3. Update the Value data of the MitigationOptions key, and make sure that you keep your existing value, like the important note below:
        • To turn this feature on. Type 1000000000000.
        • To turn this feature off. Type 2000000000000.
        • To audit with this feature. Type 3000000000000.
          Important Your existing MitigationOptions values should be saved during your update. For example, if the current value is 1000, your updated value should be 1000000001000.
      4. Restart your computer.

      Workaround 2

      Install the svg icons plugin:

      1. This workaround affects all users of your site and adds about 58KB of compressed CSS. For comparison, we already load 150KB of CSS and 700KB of JS on a View Page. These will be cached by the browser most of the time.
      2. Download the plugin here: confluence-svg-icons-0.1.1.jar
      3. Install the plugin on your instance.
      4. The plugin replaces the icons loaded by the font with icons from the custom css provided by the plugin. The icons are base64 encoded svg background-images instead of the atlassian-icons font.
      5. Clearing the browser cache might be required to see the effect.
      6. Note that this plugin will not make the CSS3114 error disappear as the font will continue to be blocked by the security policy.
      7. As this plugin will affect all the users of the site, even users using Confluence on other browsers will get this change.
      8. This plugin is provided as-is and is not supported by Atlassian.

      In Confluence 6.11 and 6.12 the plugin will hide some icons. Not suitable for these versions.

      Workaround 3

      Install the font and custom CSS:

      1. This workaround could work for individual users who are using Confluence with IE11 on Windows 10.
      2. This workaround is designed specifically for Windows 10 with Internet Explorer 11, and stems from this Microsoft article about the security policy. https://technet.microsoft.com/itpro/windows/keep-secure/block-untrusted-fonts-in-enterprise
      3. For this Workaround to work the font files will need to be installed on every computer affected by the Security Policy that is using IE11.
      4. Download the .ttf file that corresponds to your Confluence version
      5. Install the font locally on Windows (Right-click > Install, or move it to the C:\Windows\Fonts directory). If you have a way to push fonts across your organisation, that could be used here.
      6. Add the following CSS to the Global Stylesheet:
        .aui-icon::before { font-family: Atlassian-icons !important; }
      1. A computer restart might be required.
      2. Check the pages for the fonts. Note that Admin pages will not have the font because they don't load the custom stylesheet, so the icons still won't display on the admin pages.
      3. If that still doesn't work, please try with .aui-icon:before < Notice single colon, instead of double colon.

            [CONFSERVER-45702] Windows 10 - IE 11 - Confluence does not render navigation bar icons

            Atlassian Update - 14 April 2025

            Hi,

            At Atlassian, our goal is to ensure we’re providing the best experience for our customers. With our new Data Center strategy, Atlassian's focus is on security, compliance, and performance and is a key driver in prioritizing bugs. Closing the bugs that do not fall into those categories will allow us to focus on the ones in the most current versions of our products.

            This bug is being closed due to a lack of engagement in the last four years, including no new watchers, votes, or comments; this inactivity suggests a low impact.

            Please note the comments on this thread are not being monitored.

            You can read more about our bug fix policy here and how we prioritize bugs.

            To learn more about our recent investments in Confluence Data Center, please check our public roadmap and dashboards containing recently resolved issues, current work, and future plans.

            Kind regards,
            Confluence Data Center

            George Varghese added a comment - Atlassian Update - 14 April 2025 Hi, At Atlassian, our goal is to ensure we’re providing the best experience for our customers. With our new Data Center strategy, Atlassian's focus is on security, compliance, and performance and is a key driver in prioritizing bugs. Closing the bugs that do not fall into those categories will allow us to focus on the ones in the most current versions of our products. This bug is being closed due to a lack of engagement in the last four years , including no new watchers, votes, or comments; this inactivity suggests a low impact. Please note the comments on this thread are not being monitored. You can read more about our bug fix policy here and how we prioritize bugs. To learn more about our recent investments in Confluence Data Center, please check our public roadmap and dashboards containing recently resolved issues , current work, and future plans . Kind regards, Confluence Data Center

            I'm on Confluence server 6.13.0.

            Adding the font locally and the global style doesnt work.

            I have rebooted.

             

             

            Michael Regelin added a comment - I'm on Confluence server 6.13.0. Adding the font locally and the global style doesnt work. I have rebooted.    

            Andrii Striletskyi added a comment - - edited

            Fixed by adding the following into Global Stylesheet : 

            .aui-icon::before { font-family: "Adgs Icons" !important; }

            Andrii Striletskyi added a comment - - edited Fixed by adding the following into Global Stylesheet :  .aui-icon::before { font-family: "Adgs Icons" !important; }

            Tim Covert added a comment -

            Worth noting that at the bottom of the article (https://technet.microsoft.com/itpro/windows/keep-secure/block-untrusted-fonts-in-enterprise) there is a link to a second article (https://blogs.technet.microsoft.com/secguide/2017/06/15/dropping-the-untrusted-font-blocking-setting/) stating that Microsoft Security no longer recommends using this feature.  Might be useful ammunition for those of you trying to get GPOs changed to not enable this feature.

            Tim Covert added a comment - Worth noting that at the bottom of the article ( https://technet.microsoft.com/itpro/windows/keep-secure/block-untrusted-fonts-in-enterprise ) there is a link to a second article ( https://blogs.technet.microsoft.com/secguide/2017/06/15/dropping-the-untrusted-font-blocking-setting/)  stating that Microsoft Security no longer recommends using this feature.  Might be useful ammunition for those of you trying to get GPOs changed to not enable this feature.

            Please up the priority of this issue.  We are unable to utilize IE at all.  Neither our 6.0.6 Production environment nor our 6.7.2 Test environment work with IE.  

            Diane Metzger added a comment - Please up the priority of this issue.  We are unable to utilize IE at all.  Neither our 6.0.6 Production environment nor our 6.7.2 Test environment work with IE.  

            I do not believe there is a patch yet. We are using Confluence 6.3.1 and experiencing the same issue. It only appears to affect Windows 10 machines under IE (Chrome, Edge, and Firefox all seem fine). Turning off the security feature (Workaround 1) works, but may not really be an option.

            Aaron Craven added a comment - I do not believe there is a patch yet. We are using Confluence 6.3.1 and experiencing the same issue. It only appears to affect Windows 10 machines under IE (Chrome, Edge, and Firefox all seem fine). Turning off the security feature (Workaround 1) works, but may not really be an option.

            James Tran added a comment -

            We have the same issue as well on Confluence 5.8.18 and 10000+ users.  My company will not unblock the untrusted fonts Group Policy because of font vulnerabilities in the past.  Is there a patch fix that can be applied?  Does the latest Confluence 6.x version include a fix for this?

            James Tran added a comment - We have the same issue as well on Confluence 5.8.18 and 10000+ users.  My company will not unblock the untrusted fonts Group Policy because of font vulnerabilities in the past.  Is there a patch fix that can be applied?  Does the latest Confluence 6.x version include a fix for this?

            Minh,

            did you have the GPO enabled that blocks untrusted fonts? You can also use the reg keys.

            In our organization, we have windows 10 with that GPO enabled for security reasons and it is blocking the icons in Confluence. The only work around is to use Microsoft Edge, but Edge doesn't support Edit in Office.

            Francois Lelievre-Lemelin added a comment - Minh, did you have the GPO enabled that blocks untrusted fonts? You can also use the reg keys. In our organization, we have windows 10 with that GPO enabled for security reasons and it is blocking the icons in Confluence. The only work around is to use Microsoft Edge, but Edge doesn't support Edit in Office.

            Minh Tran added a comment -

            Hi bboyle@atlassian.com,

            I tried to reproduce the problem as you stated with Windows 10 + IE11 with our Confluence 6.0.3

            Thanks,
            Minh Tran
            Confluence BugMaster
            Atlassian

            Minh Tran added a comment - Hi bboyle@atlassian.com , I tried to reproduce the problem as you stated with Windows 10 + IE11 with our Confluence 6.0.3 Thanks, Minh Tran Confluence BugMaster Atlassian

            Ben Hanson added a comment -

            As I type this response, I cannot see icons on this very response sheet.....

            Thanks for the bug report, and I think as Windows 10 becomes more prevalent, this is going to balloon if not addressed.

            Ben Hanson added a comment - As I type this response, I cannot see icons on this very response sheet..... Thanks for the bug report, and I think as Windows 10 becomes more prevalent, this is going to balloon if not addressed.

              Unassigned Unassigned
              bboyle@atlassian.com BrianB (Inactive)
              Affected customers:
              18 This affects my team
              Watchers:
              28 Start watching this issue

                Created:
                Updated:
                Resolved: