Outbound domains an admin approves at install
Forge apps declare every domain they can reach, and Atlassian enforces the list. A Jira administrator approves it once, at install or on an upgrade that changes it. Diagrams for Jira declares Capable's own hosts and Sentry, nothing else.
#What it connects to
Host | What it carries |
|---|---|
| The app's own scripts, styles, fonts and images, including the icons used by the built-in D2 templates. |
| The diagram rendering service that turns text diagrams into pictures. |
| The app's live connection and backend. |
| Error reporting, declared as analytics so an administrator can opt out of it. |
Icons inside your own D2 diagrams. D2 lets a shape use an icon from any web address. Capable's rendering service fetches it when it draws the diagram, not your browser. If an icon cannot be fetched, the diagram still renders and that icon is left blank. The built-in D2 templates use icons hosted by Capable, so they never depend on another site.
#Where you do it
Task | Where |
|---|---|
Install Diagrams for Jira and approve its permissions | Atlassian Marketplace → Jira → Apps → Manage apps |
#Worth knowing
There is no settings screen in the Jira edition, so you cannot add your own domains or point rendering at your own server.
Nothing outside this list can be reached; the Forge platform blocks it.
The licence banner's own links are broken in Jira (a Confluence admin path, and a Marketplace URL missing its listing id).
#Related
Better with company.
