Can Atlassian Support install User Macros to a Confluence OnDemand instance?

[Walter Stabosz]

Has anyone been able to successfully get Atlassian Support to install a User Macro to their Confluence OnDemand instance? I wrote a macro, and I want to use it on my OnDemand wiki, but the User Macro page is disabled for OnDemand. I'm hoping that Atlassian Support has access to my User Macro Admin page and is able to install it on my behalf.

Same question for Custom HTML, has anyone gotten Atlassian to update their wiki's Custom HTML settings for them.

Background research

From this page, I understand that User Macros are disabled in Confluence OnDemand, and I understand from this ticket that the HTML macro is disabled for XSS security concerns.

However, what I don't understand is why are User Macros disabled in OnDemand. I figure it's either a security issue (XSS prevention), or a technical issue (something about the cloud infrastructure prevents it).

According to this page, the user macros are stored in the database, so I don't think it's a cloud-infrastructure issue. Granted, I don't know much about distributed databases, so I could be mistaken.

And a User Macro does allow the user to put arbitraty JavaScript into wiki pages, which is a great XSS vector, so It's more likely the feature is disabled as a security measure, not technical.

[NikE]

Bad news - currently there is a no exceptions policy on installing custom macros, plugins, or making custom changes to accounts on the OnDemand platform. I think you have a pretty full picture of the situation: there are security issues (especially with the HTML macro), infastructure limitations and compatibility/update issues as we install updates to the platform on a regular basis.

We fully appreciate how much value plugins add (and what amazing things can be done with our software when people get creative) but this is currently outside of the scope of the OnDemand service. I'm guessing that you came across this page during your research...and there is a plan on the road map to work to include increased flexibility and plugin options in the future, but for the time being, everything is set.