For security reasons, you may wish to limit the URLs from which users can get content that is displayed on your Confluence site, such as the content displayed in a gadget. A whitelist is a list of URLs whose content you wish to make available to users of your site.

Adding whitelist URLs for external gadgets

By default, Confluence will block a gadget's access to third-party data sources. When you are using a gadget that draws content from a third-party data source, you will need to add the URL of that data source to the gadget whitelist.

To add a URL to the whitelist for gadgets:

  1. Choose Confluence Admin > Configuration > External Gadgets.
  2. The 'External Gadgets' configuration screen appears. Enter a URL for the Host to Whitelist under 'Gadget whitelist'. For example, http://jira.atlassian.com.  You can also enter a URL pattern, as described below.
  3. Click Add.

(warning) The information on this page does not apply to

Unable to render {include} The included page could not be found.
.

Screenshot: Configuring a URL whitelist for external gadgets

Rules for URL pattern-matching

Enter one URL or URL pattern per line. You can enter a full URL or use pattern-matching as described below:
  • If the rule starts with an equals sign (=), only the exact URL following the '=' will be allowed.
  • If the rule starts with a slash (/) then the whole rule will be treated as a regular expression.
  • Otherwise, any asterisk (*) will be treated as a wildcard to match one or more characters.

Notes

  • URLs for which Application Links are configured are automatically whitelisted, so you do not need to add them to this list.
  • When a gadget or subscription is removed from your site, the whitelist entry is not automatically removed.
  • No labels