Content Formatting Macros for Confluence Server and DC

Frequently Asked Questions

Is Content Formatting for Confluence free or paid?

Starting from version 5.0.0, Content Formatting for Confluence is a fully-paid app. This means we can invest in the future development of the app and, of course, it becomes fully-supported by Adaptavist’s support SLA.

What if Iframes Macro doesn’t work on my browser?

If your Confluence is running on http, then use of http in Iframe will be fine. Although, if your Confluence is accessed via https, then use of http in Iframe won’t work - it’s a security feature of browsers.

What if a PDF is downloaded instead of opening on a page?

Atlassian has changed the way Confluence handles attachments since version 4.2. Now, you need to do it by creating a page and using built-in Confluence macros to view the file. Please refer to the Confluence documentation to get more information.

How do I use CSS Stylesheet and CSS for macros?

To use the class parameter in any of the macros that has the option, you need to use the CSS Stylesheet macro above them. Follow the steps below to see an example of how it works:

  1. Go to a page to edit within the space, and select Edit.

  2. Click the Insert More Content icon, and select Other Macros from the dropdown menu.

  3. Type CSS into the search bar, and select CSS Stylesheet from the options.

  4. Fill in desired fields, and click Insert.

  5. Click inside the CSS Stylesheet macro, and type .testClass { background-color: red; } to create a CSS class that can be used in all macros placed below the CSS Stylesheet macro.

  6. Insert another macro below the CSS Stylesheet macro, and type testClass in the Class section.

  7. Click Update to save the page and see the results of the CSS styling on the page.

CSS class names are case sensitive, so in the example above, you need to use a capital 'C'. For more information on CSS, you can use this CSS Tutorial.

How can I use Tabs as an Anchor?

Please define individual IDs for the Tabs. Once the Tabs macro is inserted, you should define its ID, which will act as an anchor tag. You don’t need to insert the Anchor macro explicitly to the body content of the Tab page macro. See the Tabs page for details.

Cross Site Scripting (XSS)

As Confluence is a content management system that allows user-generated content to be posted on the web, precautions have been taken within the Content Formatting Macro to prevent cross-site scripting attacks.

The Content Formatting HTML macros specifically prevent the use of unknown HTML attributes, and all parameter values are checked against an allowable range to ensure they are not being abused. For example, where an HTML attribute has an 'enum' set of values, only those values are allowed; where it’s a free text attribute, the value is checked for breaking out of the attribute rules. If any values are found which aren’t allowed, a macro exception is thrown, and the output is not rendered.

Additional Precautions:

  • All of the form HTML elements are disabled by default, and they must be manually enabled by an administrator.

  • JavaScript attributes are not allowed and cannot be enabled e.g., 'onclick'.