Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.yamuno.com/llms.txt

Use this file to discover all available pages before exploring further.

Features & How To

HTML, CSS & JavaScript Editor

A three-tab code editor with syntax highlighting and auto-complete. Write your HTML structure, CSS styles, and JavaScript logic in separate tabs — all applied to the same rendered output. Live preview updates in real time as you type, in a resizable split panel. What you see in the preview is exactly what page visitors will see.

CSP Security Enforcement

Control which external resources can load inside the macro iframe using Content Security Policy (CSP):
ModeBehaviour
Block all (default)No external resources load. Only inline HTML/CSS/JS works.
WhitelistOnly domains explicitly added by an admin can load resources.
Allow allAny external URL can load. Use only in trusted internal environments.
→ Security & CSP guide

Domain Whitelist

In Whitelist mode, admins add specific domains (e.g. cdn.jsdelivr.net, fonts.googleapis.com) that are allowed to serve resources. An empty whitelist is treated as Block all.

Editor Access Control

Restrict who can open and edit the HTML editor. Admins configure a user whitelist in Confluence Settings → HTML Macro. Users not on the whitelist see the rendered output only — they cannot view or modify the source code. Viewers never see the source code regardless of access control settings.

Auto-Adjusting iframe Height

The macro automatically resizes its iframe to fit the rendered content — no manual height setting needed, no blank space below your widget.

Macro Usage Analytics

From Confluence Settings → HTML Macro → Usage, admins can see:
  • Every Confluence page using the HTML Macro
  • Which space each macro is in
  • Direct links to each page
Useful for auditing what custom widgets are deployed across your instance.

Forge-Powered Security

HTML Macro runs entirely on Atlassian Forge. All code is stored as part of the macro configuration inside Atlassian’s infrastructure. Nothing is sent to or stored on external servers.