Version 1.6.2 • Released 2021-05-21 • Supported By The Plugin People • Paid via Atlassian • Commercial
No release notes.
Version history
1.6.2Confluence Server 7.0.1 - 7.15.32021-05-21minor update for API changes 1.6.0Confluence Server 7.0.1 - 7.11.22019-11-18Compatibility release Version 1.6.0 • Released 2019-11-18 • Supported By The Plugin People • Paid via Atlassian • Commercial- Confluence 7.0.1+ compatibility
1.5.1Confluence Server 6.0.1 - 6.15.102019-09-06Address one XSS attack, reword app config Version 1.5.1 • Released 2019-09-06 • Supported By The Plugin People • Paid via Atlassian • Commercial- we have resolve one specific XSS attack within the application, all customer should upgrade to this version to resolve it.
- in 1.5.0 we removed the iframe wrapper as a knee jerk response to a reported XSS vulnerability. On reflection, and in discussion and agreement with Atlassian, this is something that customers must actually accept as a possibility when using this app, so this version re-instates iframe support. We have now made the configuration page more verbose about the risks of using any html inclusion, and the limitation of what the apps does to 'stop' scripts - its not exhaustive.
1.4.2Confluence Server 6.0.1 - 6.15.102019-04-30Security update: control script execution and whitelist include hosts/domains Version 1.4.2 • Released 2019-04-30 • Supported By The Plugin People • Paid via Atlassian • CommercialFixes include:
- CHTMLIR-10 : Sane defaults for HTMLIR settings and/or ability to restrict choices
- CHTMLIR-11 : Configuration page to allow admin to disable/omit Scripts globally
- CHTMLIR-12 : Unfinished html code returned into Confluence without opening Script tag
- CHTMLIR-13 : Main div container missing > after setting width & height; results in rendering issues on Preview mode
- CHTMLIR-14 : White-listing host/s to enhance security
1.4.1Confluence Server 6.0.1 - 6.15.102018-08-24Compatibility with Confluence 6.11 and Confluence read only mode Version 1.4.1 • Released 2018-08-24 • Supported By The Plugin People • Paid via Atlassian • CommercialHTML Include and Replace is now compatible with Confluence 6.11 and Confluence read only mode.
1.4.0Confluence Server 6.0.1 - 6.9.32016-11-15Compatibility with Confluence 6.0.x-6.3.x Version 1.4.0 • Released 2016-11-15 • Supported By The Plugin People • Paid via Atlassian • CommercialWe start to see some website publishers blocking the loading of content to non-parent iframes. If you see an emtpy result, this could be the cause. Try http://www.slashdot.org , as an example that works.