IframeWhiteListUrl

Represents a list of external domains that you allow to frame your Visualforce pages. This object is available in API version 45.0 and later.

Supported Calls

create(), delete(), describeSObjects(), query(), retrieve(), update(), upsert()

Fields

Field Name	Details
Url	Type string Properties Create, Filter, Group, idLookup, Sort, Update Description The unique domain to be whitelisted. Accepts these formats: example.com, *example.com, and http://example.com.

Usage

To use this object, on Session Settings in Setup, select Enable clickjack protection for customer Visualforce pages either with headers disabled or with standard headers. These options both allow framing on whitelisted external domains and provide clickjack protection.

Alternatively, you can customize session settings via the SecuritySettings Metadata API type. To use the IframeWhiteListUrl object, set either the enableClickjackNonsetupUser or enableClickjackNonsetupUserHeaderless field to true. For more information, see SecuritySettings in the Metadata API Developer Guide.

Object Reference for Salesforce and Lightning Platform

IframeWhiteListUrl

Supported Calls

Fields

Usage