MailView · Confluence app
The email on the page, not a file to download.
Meeting notes with the customer's email attached, an incident page with the alert that started it, a decision log with the thread behind it. Confluence keeps the .eml or .msg file, but to read it everyone downloads it and opens it somewhere else. MailView shows the email on the page, and tells you when it looks like phishing.
Submitted to the Atlassian Marketplace, in review
What MailView shows
The email from the file, with nothing added and scripts and forms taken out. No copies, no storage, no external services.
An email macro
Add the Email (MailView) macro and choose an .eml or .msg attachment of the page. The email shows on the page, in the editor and when people read it.
Emails on this page
Under the page title: every email attachment of the page, newest first. The 10 newest get subject, sender and a verdict icon (up to 2 MB each). Click one to read it in a large view.
Message, Details, Original
The email as it was sent; every header, and every link with the address it points to; and the plain text and source of the file.
A phishing check
Looks OK, Be careful, Likely phishing or Not enough to judge, with the reasons: a failed SPF, DKIM or DMARC result recorded in the headers, domains with lookalike letters from other alphabets or with accents, links that go somewhere else than their text shows.
PDF and Word export
Exporting the page gives a clean static version of each email shown with the macro: subject, from, to, date, text and the names of its attachments, plus the verdict line.
Outlook .msg and standard .eml
Both formats. The app reads the bytes to tell .msg from .eml, and also checks attachments without a known file type, so a forwarded email without a file name is recognized too.
Nothing is stored, nothing is sent
MailView is built on Atlassian Forge, for Atlassian's Runs on Atlassian programme. It reads the email attachments of the page you open, with your own permissions, and renders them in your browser. Dortus has no servers, keeps no copies and never sees your email. Scripts, forms and remote images in emails are removed before anything is shown.
- Platform
- Atlassian Forge
- Storage
- None
- Permission
- Read page attachments
- Sent outside Atlassian
- Nothing
Documentation
Everything you need to install and use MailView for Confluence. There are no app settings.
Getting started
- Install MailView for Confluence from the Atlassian Marketplace. You need to be a Confluence admin.
- Attach an .eml or .msg file to a page. MailView only reads the attachments of the page itself.
- Show one email on the page. Edit the page and insert the Email (MailView) macro. Its settings open by themselves: choose the email attachment and click Save. The email shows in the editor and, after you publish, for everyone who reads the page.
- Or open any email without a macro. Click Emails on this page under the page title to see all email attachments of the page.
User guide
The macro. The Email (MailView) macro shows one email attachment of the page. The macro settings list the .eml and .msg attachments of the page, and also files without a file type, marked "(no file type)", because a forwarded email often has no file name. To show a different email, edit the page and open the macro settings again.
Emails on this page. Under the page title, Emails on this page opens a list of every email attachment of the page, newest first, with subject, sender, date and an icon: a red warning for Likely phishing, an orange one for Be careful, a grey question mark for Not enough to judge, an envelope otherwise. Subject, sender and icon are filled in for the 10 newest emails; an email that was not checked keeps the envelope, the same as one that looks OK (see Limits). Click an email to open it in a large view. No download needed. Forwarded emails without a file name are recognized by their headers and listed too (the 10 newest files without a known file type are checked).
Message. Subject, from, to, cc and date at the top. Below that, the message formatted as it was sent. If the email looks suspicious, a bar above the message says Be careful or Likely phishing with the main reasons. Images that travel inside the email are shown; if the email tried to load images from the internet, they are blocked and a line says: "Remote images are blocked to protect your privacy."
Details. The verdict with all its reasons, the authentication results (SPF, DKIM, DMARC) recorded by the receiving mail server, with a line of explanation each, every header of the email, and a list of all links with the address each one points to (short links and redirects are not followed). MailView warns when a sender or link domain uses lookalike letters from other alphabets or with accents, and when a link's text names a different domain than the link actually goes to. A typo in plain letters, such as paypa1.com, is not caught.
Not enough to judge. The file has no delivery headers, or no authentication results and no sender address, so authentication and sender could not be checked. Links and attachments are still checked.
Original. The plain text of the email, and its source: the raw email for an .eml file, or every header and text field for an Outlook .msg file.
PDF and Word export. When you export the page, each Email (MailView) macro becomes a static version of the email: subject, from, to, cc and date, then the verdict line, then the text and the name and size of each attachment. The verdict line is, for example, "MailView: Likely phishing" with the main reasons, or "MailView: Looks OK, no warnings found." Very long emails are shortened and earlier replies are left out; the export says so.
Download the original. Every email keeps a Download the original link, so you can always open it in your mail app.
Leave a review. Under the list in Emails on this page there is a small link to leave a review on the Atlassian Marketplace. MailView does not count or store anything to show it.
Limits
- Supported: .eml files and Outlook .msg files attached to the page, including emails forwarded without a file name.
- Size: files over 10 MB are not shown and not included in the export; you get a download link instead. This is the same limit as MailView for Jira.
- The list under the page title: subject, sender and the verdict icon are filled in for the 10 newest emails. The icon needs a file of up to 2 MB that is read within 10 seconds. Every other email keeps the plain envelope, the same icon as an email that looks OK, and shows its verdict when you open it.
- Not supported: protected Outlook messages (.rpmsg), which only open in Outlook. MailView says so and offers the download link.
- Where it works: Confluence Cloud only. Not Confluence Data Center or Server.
- The phishing check can miss things. It looks at the headers, links and attachments of the email. Treat "Looks OK" as "nothing suspicious found", not as a guarantee.
- What it does not do: MailView never sends email, replies, or changes the page. It only shows what is already attached.
FAQ
The macro says "Choose an email attachment in the macro settings." The macro was added but no email was chosen yet. Edit the page, open the macro settings, choose the attachment and click Save.
The macro settings list no emails. The page has no email attachments yet. Attach an .eml or .msg file to the page, then open the settings again.
Emails on this page says "No email attachments on this page." MailView only looks at the attachments of the page you are on, not at other pages or at files linked from somewhere else.
Can everyone see the email? Everyone who can see the attachment in Confluence can read it in MailView. The app uses the permissions of the person who is looking, nothing more. The export uses the permissions of the person who exports.
Does MailView store the emails? No. The email is read from the attachment each time it is shown or exported. Nothing is copied or kept.
Why are images missing? Images that come from the internet are blocked on purpose, because loading them would tell the sender that the email was opened. Images that travel inside the email are shown.
Is there a version for Jira? Yes, MailView for Jira is a separate app. Installing one does not install the other.
Which languages are supported? The app is in English. The email itself is shown in whatever language it was written in.
Data and privacy
Where is data stored? Nowhere. MailView has no storage. It reads the email attachments of the page you open from your Confluence site and renders them in your browser.
What about PDF and Word exports? For an export, Confluence asks MailView for a static version of the email. MailView makes it inside Atlassian's Forge platform, with the permissions of the person who exports, and gives it back to Confluence for the export file. Nothing is kept afterwards.
What does the app send outside Atlassian? Nothing. There are no external servers and no outbound connections.
What permissions does the app ask for? One: read access to attachments (read:attachment:confluence). It cannot read the page text, and it cannot change anything.
How does it handle unsafe content? Before an email is shown, scripts, forms, embedded frames and external images and stylesheets are removed. Links open in a new tab with no referrer. The email is rendered inside its own isolated area so its styling cannot affect Confluence.
Can Dortus see our emails? No. There is no Dortus server behind the app, and it logs nothing about the email content.
What happens if I uninstall? Nothing to clean up: the app stored nothing, and the email attachments stay on the page.
Full policy: Privacy policy. Terms: Terms of service.
Support
Questions, a bug, or an idea? Email support@dortus.com. The person who builds the app reads every message. Please include your site URL, a link to the page, whether the file is .eml or .msg and roughly how big it is, what you expected and what happened. Please don't send us the email itself unless it contains nothing private.
See also: How to open .msg and .eml attachments in Confluence and Outlook .msg vs .eml