Adding HTML tags and domains to the allowlist

You can add images, tables, and links to your emails and notification templates. Out-of-the-box, the underlying HTML tags and their attributes are added to the allowlist in BMC Helix Business Workflows. This enables users to view the images, tables, and hyperlinks in emails, notification templates, and activity feed. For links or images from a website, an administrator must add the domain of the website to the allowlist.

Emails and notification templates use the BMC Helix Platform email engine. To ensure security, the BMC Helix Platform email engine only displays the URLs and images from a website if the domain is included in the allowlist.

The following HTML tags and the attributes are added to the allowlist out-of-the-box for images and tables:

img(attrib=align,alt,height,src,title,width$proto=src,http,https,cid,data),table(attrib=border,cellspacing,cellpadding,width),span(attrib=style,rx-expression,contenteditable,title),p(attrib=style),div(attrib=style),li(attrib=style)

As an administrator, you can add or modify existing attributes for the images and tables. The HTML tags and domains that are not present in the allowlist are suppressed from the email messages and activity feed.

For example, if you add the HTML tag and its attributes for videos to the allowlist, the video is displayed in the email that is sent. If the HTML tag for videos is not added to the allowlist, the video is suppressed from the email message.

To add HTML tags, attributes, and domains to the allowlist in BMC Helix Business Workflows

1. Log in to BMC Helix Business Workflows as an administrator.
2. Click My Application Settings .
   The Settings page opens in a new browser tab.
3.  Click Application Configuration > Whitelist Configuration.

4. In the Override/Additional HTML Tags, add a comma-separated list of the tags and related attributes.

   Important

   If your email client does not support base64 image, it will not be displayed even after you add it to the allowlist. For more information about the format, see Configuring email profiles and templates .

   Any new attribute that you add to an existing list is appended to the list. Any change to the existing attributes overrides the existing list.

5. In the Whitelist domain names field, enter the domains in a comma-separated list from which links and images should be displayed in the email, notification, or activity feed.
   

   Important

   Add the base domain without www. For example, add google.com instead of www.google.com.

   The following image shows an example of adding an HTML tag, its attributes, and a domain to the allowlist.
   

6. Click Save.