---
title: "How Enable strict allowlist helps with content management"
canonical: "https://support.appfire.com/space/HTML/70617267/How%20Enable%20strict%20allowlist%20helps%20with%20content%20management"
format: markdown
---
The *Enable strict allowlist* option allows you to restrict the HTML content to only the URLs available in the [Allowlist](https://appfire.atlassian.net/wiki/x/iIc1B#Configuration-Cloud-HTML_Cld_Whitelist) tab. This article illustrates how to use this option to control what HTML content can be accessed and displayed.

> 📝 If enabled, the HTML content is restricted to only the URLs available in the [Allowlist](https://appfire.atlassian.net/wiki/x/iIc1B#Configuration-Cloud-HTML_Cld_Whitelist) tab and support for nested iframes and allowlist entries with Regular Expressions is disabled.


To restrict HMTL content only to certain URLs, perform the following:

1. Navigate to **Settings** > **HTML Configuration**. Specify the URLs to be accessed in *Allowlist*.   
For example, consider the following image with a few URLs defined in the allowlist:
2. Enable the *Enable strict allowlist* option from the *Global configuration* tab in the configuration.
3. Add an *HTML* macro to the relevant page. The HTML content from the URLs listed in the allowlist is rendered. URLs from any other source other than those listed in the allowlist are not rendered. See [tutorials](https://appfire.atlassian.net/wiki/x/CwA_EQ) for more information on how to use the *HTML* macro.  
The following image displays the HTML content from the source in the macro body that is not listed in the allowlist:
  The following image displays the HTML content from the source in the macro body that is listed in the allowlist:
  

## Output

The output from the above example is displayed based on the selection of the *Enable strict allowlist* parameter.  
If *Enable strict allowlist option* is enabled, in the first case, the HTML content is not rendered while in the second case, the HTML content is rendered.

![HTML for Confluence allowlist warning for restricted content](media://4fb1fcce-0ea1-463f-a497-a1fb7e45674c)

If the *Enable strict allowlist option* is disabled, in both cases, the HTML content is rendered correctly.

![HTML for Confluence allowlist configuration example](media://86c93f6f-c1aa-49c1-b4fd-c41fc0ccdb4c)