Disabling HTML macros on specific spaces.

[Eric Sebian]

I have a need to embed an iFrame into a page for a marketing campaign. This requires me to turn on Confluence HTML macros at the add-on level. While I have removed admin rights from all of the spaces, users would still have the ability to add the HTML macro to their page. I don't think that our users would do anything malicious but I don't want to risk opening us up to cross-site vulnerabilities mentioned every. That being said, is there any way to restrict the use of the HTML macro by space?  As we'll be moving to Service Desk in the very near future, I was hoping to have the ability to do this for our knowledge base as well. Thanks. 

[Diego · Accepted solution]

Hello there!

As you noticed Eric, there are no permissions for us to set so Macro usage is limited. You can check more information about our permissions and macros here:

Space Permissions Overview

Macros

However, we can have permissions for macro usage with a third-party addon called:

Macro Security for Confluence

You can restrict macro usage based on Groups, Individual Users or even Spaces.

Let us know your thoughts Eric!

[Eric Sebian]

Hi Diego. Thanks for pointing me in the right direction. I have downloaded the add-on, but am having a problem getting the configuration to work. I will reach out to Bob Swift support to see if they can direct me. 

[Diego]

Thanks for the feedback Eric! If you need anything else, let the Community know.