can you separate whitelist for Shared link in confluence?

XMLWordPrintable

    • 2
    • 1

      Hi Team,

      We have a query regarding Share a link option in confluence.

      Currently we are using confluence 6.15.1
      According to the upgrade notes of 6.15.1, https://confluence.atlassian.com/doc/confluence-6-15-upgrade-notes-965554124.html
      ------------------------
      Upgrade notes

      Changes to the Share a link blueprint

      URLs must be added to Confluence's whitelist before they can be shared using the Share a link blueprint. This is to prevent people from accidentally or maliciously sharing links that may pose a security risk to your site. 
      ------------------------
      As a solution we can disable whitelist but it is recommend not disabling the whitelist by atlassian.

      Reason for not disabling: 
      We have the html-include-macro enabled in our confluence due to the need to include data from other sites in our confluence site. When enabling html-include macro we had to enable whitelistning as it open up for cross-site scripting.

      So my question is :
      Did Shared link functionality has same risk of cross site scripting as html include macro ?
      If your answer is NO, can you separate whitelist for Shared link?

              Assignee:
              Unassigned
              Reporter:
              saptagiri
              Votes:
              19 Vote for this issue
              Watchers:
              16 Start watching this issue

                Created:
                Updated: