---
title: "Configuration - Cloud"
canonical: "https://support.appfire.com/space/HTML/70616968/Configuration%20-%20Cloud"
format: markdown
---
> Macro (aura-html)
After [migrating](https://appfire.atlassian.net/wiki/x/zoc1B) or [installing](https://appfire.atlassian.net/wiki/x/_4g1B) *HTML for Confluence*, navigate to the Global Configuration screen:
1. Log in as a **System Administrator** with [global permission](https://confluence.atlassian.com/doc/global-permissions-overview-138709.html).
2. Navigate to > Macro (inline-media-image)
***> Settings > Atlassian Marketplace**** *on the sidebar.
3. Click* HTML Configuration* to manage the app configuration.
The configuration settings are categorized into the following tabs:
- [Global configuration](https://appfire.atlassian.net/wiki/x/iIc1B#Configuration-Cloud-HTML_Cld_GlobalConfig)
- [Allowlist](https://appfire.atlassian.net/wiki/x/iIc1B#Configuration-Cloud-HTML_Cld_Whitelist)
- [Profiles](https://appfire.atlassian.net/wiki/x/iIc1B#Configuration-Cloud-HTML_Cld_Profiles)
## > Macro (anchor)
Global Configuration
Use the toggle to enable or disable the Global Configuration settings.
| **Parameter** | **Description** |
| --- | --- |
| > Macro (anchor)
*Restrict URL access* | This parameter controls whether or not the URL parameter on the *HTML for Confluence* macro must conform to the allowlisted URLs. Administrators can turn on the Allowlist to restrict access to URLs configured in the [Allowlist settings](#Configuration-Cloud-HTML_Cld_Whitelist).
If enabled, the *URL* parameter in the app is restricted to only the URLs available in the *Allowlist* tab. |
| *Enable strict allowlist* | This option will apply the URL [Allowlist](#Configuration-Cloud-HTML_Cld_Whitelist) to all content in the HTML content. Note that this feature disables any nested iframes and does not support allowlist entries with regular expressions.
> ⚠️ The *A**llowlist *is shared between Appfire and/or Bob Swift applications. |
| *Allow JavaScript* | This option controls the usage of Javascript in the *HTML* macro. When enabled, the user can use Javascript in the HTML and vice versa. |
## > Macro (anchor)
Allowlist
Manage the URLs that the app can access from this page. If the *[Restrict URL access](#Configuration-Cloud-HTML_Cld_GlobalConfig_RestrictURL)* option is enabled, the app is restricted to allow the specified URLs only.
| **Parameter** | **Description** |
| --- | --- |
| *Expression* | Enter a URL or an expression here. |
| *Type* | Select a type from the following list:
- *Domain name *- allows URLs of a specific domain. Example: `https://www.example.com/`
- *Exact match *- allows only the specified URL. Example: `https://www.example.com/thispage`
- *Wildcard expression *- allows all matching URLs. Use * as a wildcard character to replace one or more characters. Example: `https://*example.com`
- *Regular expression *- allows all URLs matching the specified regular expression. Example: `http(s)?://www\.example\.com`
Refer to [this Wikipedia article](https://en.wikipedia.org/wiki/Regular_expression) for more information about regular expressions or see the [regular expressions tutorial](https://appfire.atlassian.net/wiki/x/JIE1B). |
You can perform the following actions on this page:
- **Add** the URL after specifying the *Expression* and *Type*.
- **Update** after modifying the details. Select the *Expression* to enable editing of the URL.
- **Delete** to remove the URL.
- **Save** after adding or modifying any URL in the list.
## > Macro (anchor)
Profiles
Profiles consist of a common set of parameters that allow users to choose a profile in the macros. Some advantages of using profiles are:
- Profiles allow user authentication required by some URLs to be hidden from page viewers and editors. Only Confluence administrators have access to this information.
- Enables macro editors to quickly configure the macro by reusing a shared definition for URL access.
- Relative addressing can be used making the page content less likely to require changes when base URLs are relocated.
- Macro configured URL (that is not a full URL) is appended to the profile provided URL.
The page displays a list of profiles available for the macros. Click **Add Profile** to open a pop-up window as:
| **Parameter** | **Description** |
| --- | --- |
| *Profile name* | Enter a name for the profile. |
| *Profile type* | Displays URL as selected, by default. |
| *URL* | Enter the URL to be accessed. |
| *User; Password* | Enter the user name and password to access the specified URL. |
| *Access token* | Enter the access token to access the specified URL, if needed. Administrators must generate the access tokens from applications, if required, and enter that here. |
| *URL parameters* | Mention any extra parameters that must be appended to the URL here. |
| *Request headers* | Displays the request header(s) created as per the given information. |
You can perform the following actions on this page:
- Click :edit-pencil: to edit the profile details.
- Click > Macro (inline-media-image)
to remove the profile.
- Click **Save profile** to create the profile.
## > Macro (anchor)