Steps to reproduce

1. Open any page in Confluence
2. Attach a SWF file with links to the page
3. Enter Edit mode
4. Insert a Multimedia macro and select the SWF file
5. Save the page
6. Run the SWF presentation and click any link

Expected behavior

The link should open the configured URL in a new tab.

Actual behavior

Nothing happens.

Workaround

1. Open your multimedia macro page in Chrome.
2. Select the three dots button on the top right corner, then select "More Tools > Developer Tools".
3. Use the inspect tool and click the Multimedia macro.
4. Check the HTML code on the right side. Copy the whole <embed> node.
5. Paste this code inside the HTML Macro and remove the 'allownetworking="none"' parameter.
6. Save the page and try to open the link within the SWF presentation.

Notes

The issue occurs because https://jira.atlassian.com/browse/CONFSERVER-38127 was corrected, which means that performing the workaround will allow XSS.