Attachments no longer open in browser and users are instead prompted to download the files

Still need help?

The Atlassian Community is here for you.

Ask the community


On Confluence 5.1 and above, attachments files no longer open in the browser itself and users are being prompted for download.


The current behavior (Confluence not allowing attachments to be opened in the browser) is a side effect of a security improvement added to the product. As attachments can be "active content", the behavior in Confluence will not be reverted.


For Self-Hosted Instances:

1. Click on cog at the Confluence header and choose "Confluence Admin"
2. Under "Users & Security" choose "Security Configuration".
3. Click any of the "Edit" buttons on the page and find the "Attachment Download Security Policy" section.
4. Select the "Insecure: Display all attachments inline" option and click "Save".

For Cloud Instances:

Please create a Support ticket at requesting the change to be done in your instance.

Last modified on Jun 20, 2019

Was this helpful?

Provide feedback about this article
Powered by Confluence and Scroll Viewport.