Html macro - Secuirty Considerations

[Hugo]

Hello,

could someone please elaborate on the security risks when using the

https://confluence.atlassian.com/doc/html-macro-38273085.html

html-macro?

We're not sure how big the risk is when we active this macro.

Thx.

Hugo

[Brant Schroeder]

@Hugo 

Anyone who has access to the site would be able to implement Cross-Site Scripting attacks.  While your team would probably never do this if one of their accounts could become compromised and the attacker would use this as an opportunity to implement this type of attack.