Questions tagged [clickjacking]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
23 views

IFrame Grand Parent Record on Grand Child Record

I'm trying to IFrame a Record from my Project Object to it's Grandchild the Case Object. There is an Object called Related_Doctor that sits in-between. When I use the below code I get a "salesforce....
0
votes
0answers
46 views

'URL no longer Exist' issue when trying to open a link from inline visualforce page

I have an inline VF page like following in my application that have multiple links that is created using html anchor tags. <apex:page showHeader="false" sidebar="false" standardController="acc__c" ...
1
vote
1answer
169 views

Override Clickjack setting for visualforce page

I have a VF page which shows some status value in Home page. In my Org Clickjack is enabled and because of that my VF page is not shown in the Home page. Can anyone tell me how to override the ...
2
votes
0answers
236 views

How to display Napili community in iframe on third-party domain?

I am trying to display Napili community in a iframe on external domain but I am hitting the below error: Load denied by X-Frame-Options: https://tryeverrything-developer-edition.na50.force.com/s/ ...
1
vote
0answers
132 views

Global actions and clickjack protection

Clickjack protection protects your SF org by blocking pages served from a different domain. Now, I see an issue with you mix it with VisualForce custom global actions. Repro steps Create the world'...
4
votes
1answer
726 views

Is it possible to create an inline VF page with clickjacking enabled? (URL no longer exists error)

When I try to include the following VF page into the layout: <apex:page standardController="Account"> <h1>Hi</h1> </apex:page> I get the "URL no longer exists" error ...
1
vote
0answers
299 views

Web Browser XSS Protection Not Enabled

I have to scan HTTP Request and got this 2 low level risk. How to resolve this problem coming in ZAP Report?
1
vote
2answers
58 views

salesforce support [duplicate]

I want to disable clickjack protection. I have tried to log a case in salesforce support to turn it off (by default it is enabled and we can't change it). Is there any way to log a case to turn-off ...
-2
votes
1answer
466 views

Enable clickjack protection for non-setup Salesforce pages

i want to enable the iframe on visualforce pages.i am going to disable it from Administration Setup" -> "Security Controls" -> "Session Settings but it is disabled. how can i disable/uncheck it. ...
4
votes
0answers
535 views

Not use iframe in Canvas App

We have a Canvas App configured as part of a Connected App, which is wired to a javascript frontend application. The frontend JS app has been hosted in AWS servers. The Connected App has been ...
6
votes
1answer
2k views

Clickjack Protection

Spring 14 is automatically enabling Clickjack protection on all non-setup pages. It's a critical update going live on Feb 9, 2014. It seems that this update enables a same origin policy on the ...
12
votes
2answers
1k views

Winter 13 Clickjacking protection - is the following expected or a bug?

Here are the steps to reproduce on a Winter 13 sandbox: Create the following VisualForce component called TestClickJackComponent: <apex:component > <!-- Begin Default Content REMOVE THIS --&...
8
votes
3answers
3k views

Upcoming “clickjacking” protection

There is a new alert on the Partnerforce portal that is letting partners know of the upcoming "clickjack protection" for non-setup pages in Winter '13. It seems to be stating that if a customer turns ...