Questions tagged [clickjacking]
The clickjacking tag has no usage guidance.
18
questions
0
votes
0
answers
25
views
Is it possible to embed a page from an Aura Experience Cloud Site in an iframe on an external domain?
I am trying to embed an Aura Experience Cloud Site page in an iframe on an external domain.
With reference to this documentation - https://help.salesforce.com/s/articleView?id=sf....
1
vote
3
answers
1k
views
Embed Community website in a Salesforce Lightning page via iframe
I generated a community page from Salesforce Survey tools, I then have this kind of community URL : https://dev-example.cs162.force.com/something. Now I want to display that URL within a Lightning ...
- 129
2
votes
0
answers
1k
views
Embed Experience cloud pages as iframe in external web site
We need to integrate Experience Cloud (Community) page content in an external website owned by our client.
The Experience Cloud (Lightning Community) is active and found under a sub-domain (custom ...
- 4,135
1
vote
1
answer
787
views
iframe/embed salesforce into another site
Is this possible to do anymore?
I'm trying to iframe Salesforce, in it's entirety for SSO functionality without having the user leave my web application. My application is a connected app and we would ...
- 113
2
votes
1
answer
4k
views
Loading a Visualforce Page in a LWC using an iFrame while click protection is on
We have a Visualforce page that uses a large JQuery library that we wrote. We wanted to use that JQuery library in a LWC and so we create a LWC with an iframe that loads the Visualforce page. (We used ...
- 607
0
votes
1
answer
60
views
IFrame Grand Parent Record on Grand Child Record
I'm trying to IFrame a Record from my Project Object to it's Grandchild the Case Object. There is an Object called Related_Doctor that sits in-between.
When I use the below code I get a "salesforce....
- 178
0
votes
0
answers
135
views
'URL no longer Exist' issue when trying to open a link from inline visualforce page
I have an inline VF page like following in my application that have multiple links that is created using html anchor tags.
<apex:page showHeader="false" sidebar="false" standardController="acc__c" ...
- 101
0
votes
2
answers
328
views
Override Clickjack setting for visualforce page
I have a VF page which shows some status value in Home page. In my Org Clickjack is enabled and because of that my VF page is not shown in the Home page. Can anyone tell me how to override the ...
- 714
2
votes
0
answers
268
views
How to display Napili community in iframe on third-party domain?
I am trying to display Napili community in a iframe on external domain but I am hitting the below error:
Load denied by X-Frame-Options:
https://tryeverrything-developer-edition.na50.force.com/s/ ...
- 8,767
2
votes
0
answers
183
views
Global actions and clickjack protection
Clickjack protection protects your SF org by blocking pages served from a different domain.
Now, I see an issue with you mix it with VisualForce custom global actions.
Repro steps
Create the world'...
- 4,006
6
votes
1
answer
1k
views
Is it possible to create an inline VF page with clickjacking enabled? (URL no longer exists error)
When I try to include the following VF page into the layout:
<apex:page standardController="Account">
<h1>Hi</h1>
</apex:page>
I get the "URL no longer exists" error ...
- 167
1
vote
0
answers
342
views
Web Browser XSS Protection Not Enabled
I have to scan HTTP Request and got this 2 low level risk.
How to resolve this problem coming in ZAP Report?
- 535
1
vote
2
answers
70
views
salesforce support [duplicate]
I want to disable clickjack protection. I have tried to log a case in salesforce support to turn it off (by default it is enabled and we can't change it).
Is there any way to log a case to turn-off ...
- 327
-2
votes
1
answer
1k
views
Enable clickjack protection for non-setup Salesforce pages
i want to enable the iframe on visualforce pages.i am going to disable it from
Administration Setup" -> "Security Controls" -> "Session Settings
but it is disabled. how can i disable/uncheck it.
...
- 327
4
votes
0
answers
707
views
Not use iframe in Canvas App
We have a Canvas App configured as part of a Connected App, which is wired to a javascript frontend application. The frontend JS app has been hosted in AWS servers. The Connected App has been ...
- 181
6
votes
1
answer
2k
views
Clickjack Protection
Spring 14 is automatically enabling Clickjack protection on all non-setup pages. It's a critical update going live on Feb 9, 2014.
It seems that this update enables a same origin policy on the ...
- 898
12
votes
2
answers
2k
views
Winter 13 Clickjacking protection - is the following expected or a bug?
Here are the steps to reproduce on a Winter 13 sandbox:
Create the following VisualForce component called TestClickJackComponent:
<apex:component >
<!-- Begin Default Content REMOVE THIS --&...
- 3,434
8
votes
3
answers
4k
views
Upcoming "clickjacking" protection
There is a new alert on the Partnerforce portal that is letting partners know of the upcoming "clickjack protection" for non-setup pages in Winter '13. It seems to be stating that if a customer turns ...
- 11.2k