Hi Salesforce community!

  1. I have set up an embedded service with a Post-chat page, which is overriden by a simple Visualforce page. enter image description here

  2. The VF page code is very simple:

<apex:page showHeader="false">
    Hello world!
  1. CSP configuration: enter image description here

  2. The chat is hosted in a community and works perfectly

  3. However, when a user clicks on the Post-page button, the VF doesn't load, and the following error is shown in the console:

Refused to display 'https://test-chat-gbc-developer-edition.ap16.force.com/liveAgentSetupFlow/apex/testFinalPage' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'".

The same happens when the chat is hosted by a public Visualforce page as well. Could anyone help me please? Thanks in advance. Paul

1 Answer 1


Yup, we've had the same issue.
The solution is to go to the Site page in Salesforce (Setup > Develop > Sites) and then add a Trusted Domains for Inline Frames.

Make sure you verify your Clickjack Protection Level too. A value of Allow framing of site pages on external domains (Good protection) or lower will work.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .