URL Protocol Schemes Allowed
Lightning Web Security (LWS) restricts the HTMLObjectElement.data attribute and the src attribute for iframe elements to values that use the http:// and https:// schemes. URL schemes like javascript:// aren’t allowed.
See Also