Although the major version number has incremented, it is unlikely anyone will notice any differences when upgrading. The version change is required as we are changing two API endpoints.

• Removes batik library to reduce attack surface
• Removes option to configure external image generation
• Fixes embedding diagram as CSV
• Adds warning when shape not mapped in Gliffy import

The removal of the batik library makes no difference if you are already on 10.x. It was needed for server-side image and PDF generation for IE 11 (now end of life). It's a large dependency, meaning reduced attack surface by removing it and the API endpoint.

The remote image generation feature was off by default, now it is never available. The main use was for better font support in PNG and PDF generation for IE 11, thus it is no longer required.

Although the major version number has incremented, it is unlikely anyone will notice any differences when upgrading. The version change is required as we are changing two API endpoints.

• Removes batik library to reduce attack surface
• Removes option to configure external image generation
• Fixes embedding diagram as CSV
• Adds warning when shape not mapped in Gliffy import

The removal of the batik library makes no difference if you are already on 10.x. It was needed for server-side image and PDF generation for IE 11 (now end of life). It's a large dependency, meaning reduced attack surface by removing it and the API endpoint.

The remote image generation feature was off by default, now it is never available. The main use was for better font support in PNG and PDF generation for IE 11, thus it is no longer required.

• Fixes MathJax rendering issue introduced in 10.1.12
• Fixes issue importing CSV outside of editor
• Fixes embedding simple view mode

• Fixes MathJax rendering issue introduced in 10.1.12
• Fixes issue importing CSV outside of editor
• Fixes embedding simple view mode

• IE 11 is no longer supported in this release.

• IE 11 is no longer supported in this release.

• Updates to draw.io editor 19.0.2

• Updates to draw.io editor 19.0.2

• Fixes issue with save and exit buttons on sketch / board mode.

• Fixes issue with save and exit buttons on sketch / board mode.

• Corrects encoding of German translation file. This was causing diacritic characters to render incorrectly in some dialogs.

• Corrects encoding of German translation file. This was causing diacritic characters to render incorrectly in some dialogs.

• Ensures Mathjax source is loaded from app bundle
• Updates to draw.io editor 18.0.3

• Ensures Mathjax source is loaded from app bundle
• Updates to draw.io editor 18.0.3

• Updates to draw.io editor 18.0.0 which updates the HTML sanitizer. This fixes a P3 stored XSS attack vector as described in this FAQ.

• Updates to draw.io editor 18.0.0 which updates the HTML sanitizer. This fixes a P3 stored XSS attack vector as described in this FAQ.

• Fixes import of embedded diagrams when migrating to server/DC
• Updates to draw.io editor v17.4.3

• Fixes import of embedded diagrams when migrating to server/DC
• Updates to draw.io editor v17.4.3

• Updates draw.io editor to v17.3.0.
• Removes placeholder data from REST reponses when placeholders disabled.
• Removes "edit" option from HTML export so option to edit diagram on external domain isn't offered.

• Updates draw.io editor to v17.3.0.
• Removes placeholder data from REST reponses when placeholders disabled.
• Removes "edit" option from HTML export so option to edit diagram on external domain isn't offered.

This release fixes a security vulnerability added in the 10.1.3 release (only exists in that version). The attack is a stored XSS, please contact support if you would like more details (admins and IT sec only).

This release contains no other changes from 10.1.3 for release stability.

This release fixes a security vulnerability added in the 10.1.3 release (only exists in that version). The attack is a stored XSS, please contact support if you would like more details (admins and IT sec only).

This release contains no other changes from 10.1.3 for release stability.

• Adds Math Typesetting.

• Fixes camera button (export) not shown when user doesn't have comment permission (DID-4200)

• Fixes issue duplicating diagram from macro context toolbar in page edit mode (DID-4367)

• Adds Math Typesetting.
• Fixes camera button (export) not shown when user doesn't have comment permission (DID-4200)
• Fixes issue duplicating diagram from macro context toolbar in page edit mode (DID-4367)

• Adds insertion of templates to board macro editor
• Adds option for admin to configure a regex to apply to diagram links. The format is:

linkAdjustments=[{"re":"RegExp", "r":"replacement", "m": "modifier"}, ...]

This is useful when there are hard coded base or context paths in links in shapes that are wrong after migrating spaces or instances.

• Fixes duplicated post save requests. [DID-4111. This did not cause any functional problem, just noise in the logging.
• Fixes NPE when working out page title for diagrams inside page comments.

• Adds insertion of templates to board macro editor
• Adds option for admin to configure a regex to apply to diagram links. The format is:

linkAdjustments=[{"re":"RegExp", "r":"replacement", "m": "modifier"}, ...]

This is useful when there are hard coded base or context paths in links in shapes that are wrong after migrating spaces or instances.

• Fixes duplicated post save requests. [DID-4111]. This did not cause any functional problem, just noise in the logging.
• Fixes NPE when working out page title for diagrams inside page comments.

• 10.1.0 introduced a problem scrolling pages on iPads in desktop mode. This is fixed.
• draw.io editor updated to v16.5.2.

• 10.1.0 introduced a problem scrolling pages on iPads in desktop mode. This is fixed.
• draw.io editor updated to v16.5.2.

Embeds default sketch font in bundle

Fixes NPE saving diagrams when attachment version cannot be read

Updates to draw.io editor 16.4.0

Embeds default sketch font in bundle

Fixes NPE saving diagrams when attachment version cannot be read

Updates to draw.io editor 16.4.0

Reduces number of requests on page view with diagram

Fixes issue with creating blueprint page containing diagram

Updates draw.io editor to 16.2.4

Reduces number of requests on page view with diagram

Fixes issue with creating blueprint page containing diagram

Updates draw.io editor to 16.2.4

• The export to PDF in-editor function has been replaced with the client-side print to PDF by default. The server-side PDF export suffers from a number of limitations relating to font support and HTML styling support. The default can be reverted using server config string printPdfExport=1, but we recommend to switch to the new export. Output is better quality and there's no server-side load.
• We've reduced the number of calls that are made, on average, retrieving comments when there are a large number of revisions of a diagram.
• Updates to draw.io editor v16.2.0
• Fixes absolute links manipulation

• The export to PDF in-editor function has been replaced with the client-side print to PDF by default. The server-side PDF export suffers from a number of limitations relating to font support and HTML styling support. The default can be reverted using server config string printPdfExport=1, but we recommend to switch to the new export. Output is better quality and there's no server-side load.

• We've reduced the number of calls that are made, on average, retrieving comments when there are a large number of revisions of a diagram.
• Updates to draw.io editor v16.2.0
• Fixes absolute links manipulation

• Adds the draw.io board macro. The board macro enables quick sketches in the cut-down whiteboarding mode. You can read about boards in our blog post for cloud, board are inserted in the same way as a new macro in server/DC.
• Deprecates the Lucidchart mass migration importer. 12 months have elapsed since the Lucidchart on-prem app became EOL, so the volume of migrations is now too low to justify continuing maintenance of the feature. If you are close to migrating in production, please contact support. Please contact Lucid support for alternative migration routes.
• Updates to draw.io editor 15.9.6.

• Adds the draw.io board macro. The board macro enables quick sketches in the cut-down whiteboarding mode. You can read about boards in our blog post for cloud, board are inserted in the same way as a new macro in server/DC.

• Deprecates the Lucidchart mass migration importer. 12 months have elapsed since the Lucidchart on-prem app became EOL, so the volume of migrations is now too low to justify continuing maintenance of the feature. If you are close to migrating in production, please contact support. Please contact Lucid support for alternative migration routes.
• Updates to draw.io editor 15.9.6.

• Fixes issue with saving after loading draft version
• Updates editor to draw.io version 15.9.1

• Fixes issue with saving after loading draft version
• Updates editor to draw.io version 15.9.1

• Fix for issue saving diagram image preview in Confluence 7.15

• Fix for issue saving diagram image preview in Confluence 7.15

• Updates to draw.io editor 15.8.7
• Fixes RGB values in SVG gradients IDs [DID-3797]

• Updates to draw.io editor 15.8.7
• Fixes RGB values in SVG gradients IDs [DID-3797]

• Adds a setting "disableplaceholders" to switch off diagram placeholders
• Removes stencils and shapes JavaScript from batch.js to improve performance on very slow networks
• Updates to draw.io editor v15.7.3
• Restores print button to lightbox

• Adds a setting "disableplaceholders" to switch off diagram placeholders
• Removes stencils and shapes JavaScript from batch.js to improve performance on very slow networks
• Updates to draw.io editor v15.7.3
• Restores print button to lightbox

• Fixes link URL conversion [DID-3598]
• Fixed Gliffy BPMN looping shape
• Fixed Cloud space import issues including Draft processing
• Changes 'file sync' dialog to allow overwriting changes [DID-3332]
• Always treats links to file system as absolute [DID-3471]
• Updates draw.io editor to 15.6.1

• Fixes link URL conversion [DID-3598]
• Fixed Gliffy BPMN looping shape
• Fixed Cloud space import issues including Draft processing
• Changes 'file sync' dialog to allow overwriting changes [DID-3332]
• Always treats links to file system as absolute [DID-3471]
• Updates draw.io editor to 15.6.1

• Updates to draw.io editor 15.5.2

• Removes diagram placeholders from search results
• Removes URL export option
• Html exports defaults to confluence hosted viewer js
• Fixes 'version' placeholder

• Updates to draw.io editor 15.5.2
• Removes diagram placeholders from search results
• Removes URL export option
• Html exports defaults to confluence hosted viewer js
• Fixes 'version' placeholder

• Patch fix for connector styling issue in 9.7.1

• Patch fix for connector styling issue in 9.7.1

• Adds 'version' placeholder.
• Updates to diagrams.net editor to 15.2.9.
• Adds background pages.
• Fixes initial export of view filter [DID-3148].
• Adds filename check when duplicating diagrams.
• Gliffy import: improves importer for certain diagrams [DID-3337].

• Adds 'version' placeholder.
• Updates to diagrams.net editor to 15.2.9.
• Adds background pages.
• Fixes initial export of view filter [DID-3148].
• Adds filename check when duplicating diagrams.
• Gliffy import: improves importer for certain diagrams [DID-3337].

Update to diagrams.net editor v14.9.9.

Mass Gliffy import - adds manually start search button to avoid performance issues on largest instances.

• Updates to diagrams.net editor v14.9.9.
• Mass Gliffy import - adds manually start search button to avoid performance issues on largest instances.

• Reworks mass Gliffy import confirmation dialog to list affected spaces
• Applies macro output type setting to viewer's wrapper div [DID-3058]
• Explicitly loads aui:tabs dependency due to missing tabs on some instances.

• Reworks mass Gliffy import confirmation dialog to list affected spaces
• Applies macro output type setting to viewer's wrapper div [DID-3058]
• Explicitly loads aui:tabs dependency due to missing tabs on some instances.

• Adds 'From This Page' option to splash dialog
• Fixes reflected XSS in editor and lightbox

• Adds 'From This Page' option to splash dialog
• Fixes reflected XSS in editor and lightbox

• Updates to diagrams.net editor v14.9.0
• Wraps viewer in a div to address https://jira.atlassian.com/browse/CONFSERVER-65731
• Pre-loads all stencils and shapes in the editor to avoid timing issues on load.

• Updates to diagrams.net editor v14.9.0
• Wraps viewer in a div to address https://jira.atlassian.com/browse/CONFSERVER-65731
• Pre-loads all stencils and shapes in the editor to avoid timing issues on load.

• Fixes view filter for embed macro [DID-2447].
• Changes drawio macro count in admin screen to asynchronously call to improve response in very large instances.
• Updates to diagrams.net editor v14.8.5

• Fixes view filter for embed macro [DID-2447].
• Changes drawio macro count in admin screen to asynchronously call to improve response in very large instances.
• Updates to diagrams.net editor v14.8.5

• Updates to diagrams.net editor 14.7.9
• Preloads all stencils and shapes to avoid Firefox timing bug

• Updates to diagrams.net editor 14.7.9
• Preloads all stencils and shapes to avoid Firefox timing bug

Fixes XML External Entity (XXE) injection vulnerability. This vulnerability allows authenicated users with attachment permissions to send an XXE attack.

You are strongly advised to upgrade to this release as soon as reasonably possible.

We are not aware of any malicious use of this attack, the vulnerability was discovered by a security researcher and submitted through our Bugcrowd bounty program.

In-maintenance users can ask questions via our support desk.

Fixes XML External Entity (XXE) injection vulnerability. This vulnerability allows authenicated users with attachment permissions to send an XXE attack.

You are strongly advised to upgrade to this release as soon as reasonably possible.

We are not aware of any malicious use of this attack, the vulnerability was discovered by a security researcher and submitted through our Bugcrowd bounty program.

In-maintenance users can ask questions via our support desk.

• Updates diagrams.net editor to v14.6.12

• Updates diagrams.net editor to v14.6.12

• Minor improvements to shapes, importers and functionality. All changes are specific to individual support tickets. You will be contacted in the ticket if your improvement is in this version.

• Minor improvements to shapes, importers and functionality. All changes are specific to individual support tickets. You will be contacted in the ticket if your improvement is in this version.

• Fixes issue adding diagram to draft pages under specific conditions.

• Fixes issue adding diagram to draft pages under specific conditions.

• Fixes permission restriction when inserting draw.io page template. The permission was too strict previously and could forbid users from performing the action when they had the correct permission.

• Fixes permission restriction when inserting draw.io page template. The permission was too strict previously and could forbid users from performing the action when they had the correct permission.

• Updates to diagrams.net editor v14.5.6

• Updates to diagrams.net editor v14.5.6

• Adds additional checks for diagrams updated in shared (but not published) drafts. We ensure that users editing the diagram directly from the page have the changes in the shared draft correctly taken into account.

• Adds additional checks for diagrams updated in shared (but not published) drafts. We ensure that users editing the diagram directly from the page have the changes in the shared draft correctly taken into account.

This release adds the ability to re-import all Lucidchart diagrams that have not edit subsequent changes in draw.io.

This may be useful if the import used an older draw.io version and the latest fidelity improvements are required.

Please contact support for details on how to use the re-import function.

This release adds the ability to re-import all Lucidchart diagrams that have not edit subsequent changes in draw.io.

This may be useful if the import used an older draw.io version and the latest fidelity improvements are required.

Please contact support for details on how to use the re-import function.

• Adds initial version of Lucidchart org chart importer. This is not a high fidelity import, but displays the basic structure that can be manually improved upon.

• Adds initial version of Lucidchart org chart importer. This is not a high fidelity import, but displays the basic structure that can be manually improved upon.

• Fixes issue with postMessage filtering not ignoring messages from Scroll Documents app

• Fixes issue with postMessage filtering not ignoring messages from Scroll Documents app

• Lucidchart import improvements
• Updates to diagrams.net editor v14.3.1

• Lucidchart import improvements

• Updates to diagrams.net editor v14.3.1

• The save function has been changed to communicate via postMessage to the parent frame. We saw one instance where the previous mechanism do not work, but most users will see no difference.
• Improvements to the various importers.

• The save function has been changed to communicate via postMessage to the parent frame. We saw one instance where the previous mechanism do not work, but most users will see no difference.
• Improvements to the various importers.

Note these pricing changes to draw.io for Confluence Data Center.

• Mass migration draft updates
• Hides confluence page notifications from appearing

For Gliffy and Lucidchart mass-migration updates to draft page were previously not working. We've added a button that appears after migration to start database sync with Synchrony.

If you want to migrate drafts along with published pages, start this function after the main migration.

• Mass migration draft updates

• Hides confluence page notifications from appearing

For Gliffy and Lucidchart mass-migration updates to drafts were previously not working. We've added a button that appears after migration to start database sync with Synchrony.

If you want to migrate drafts along with published pages, start this function after the main migration.

Note these forthcoming pricing changes to draw.io for Confluence Data Center.

• Lucidchart import improvements

• Lucidchart import improvements

Note these forthcoming pricing changes to draw.io for Confluence Data Center.

• Some icons in the pop-up windows in the editor were missing. These have been replaced.

• Some icons in the pop-up windows in the editor were missing. These have been replaced.

Note these forthcoming pricing changes to draw.io for Confluence Data Center.

• Lucidchart import improvements

• Lucidchart import improvements

Note these forthcoming pricing changes to draw.io for Confluence Data Center.

• Fixes issue with updating app to 9.5.0 or 9.5.1 using older Java 8 JDKs. A newly introduced dependency added a class to the artifact these JDKs couldn't handle.
• And, of course, Lucidchart import improvements. Merry Christmas to our friends in Utah :).

• Fixes issue with updating app to 9.5.0 or 9.5.1 using older Java 8 JDKs. A newly introduced dependency added a class to the artifact these JDKs couldn't handle
• And, of course, Lucidchart import improvements. Merry Christmas to our friends in Utah :).

• Fixes issue with search indexing draw.io diagrams incorrectly under certain conditions

• Fixes issue with search indexing draw.io diagrams incorrectly under certain conditions

Additional security hardening measures as a result of security reviews.

Additional security hardening measures as a result of security reviews.

We have undergone a security code review for a week, combined with launching a program for the server and DC versions on Bugcrowd.

This release contains fixes for all vulnerabilities found and general hardening, even if no specific attack vectors were found.

No critical vulnerabilities were found, but unless your upgrade cycle is particularly long, it is recommended to update to this release.

We have undergone a security code review for a week, combined with launching a program for the server and DC versions on Bugcrowd.

This release contains fixes for all vulnerabilities found and general hardening, even if no specific attack vectors were found.

No critical vulnerabilities were found, but unless your upgrade cycle is particularly long, it is recommended to update to this release.

• Lucidchart import improvements.
• Changes to extraction API calls to ensure search indexing functionality isolated to only draw.io.

• Lucidchart import improvements.
• Changes to extraction API calls to ensure search indexing functionality isolated to only draw.io.

• Fixes library loading from URL. [DID-1226]
• Improves Lucidchart import