---
schema_version: "1"
id: 0029ba64dc1fe818cbaccca5bcbbecd1ea1d9ee2827c1b3017087d1fae05fd75
title: Storefront Toolkit Tips and Limitations
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_storefront_toolkit_tips.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_storefront_toolkit_tips.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9565945a08ed0efbd2909e0746aca60b9d85c303b7208d0bf0ec29ad95f23af0
description: For best results, configure your system for optimal Storefront Toolkit performance and make sure you’re aware of toolkit limitations. This topic applies to B2C Commerce
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Storefront Toolkit Tips and Limitations

For best results, configure your system for optimal Storefront Toolkit performance and make sure you’re aware of toolkit limitations. This topic applies to B2C Commerce

- The search information tool only works for product search. It doesn't analyse content search results.
- If you redirect the browser to use an unencrypted HTTP version of the page, the Storefront Toolkit sometimes doesn’t work correctly. As a best practice, don't redirect the browser to use HTTP. To eliminate potential issues related to unencrypted pages completely, enable the global security preference Enforce HTTPS. In Business Manager, click App Launcher ![App Launcher](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/cc/b2c_merchandiser_administrator/images/appLauncher.png), and then select **Administration** | **Global Preferences** | **Security**. On the Access Restrictions tab, select **Enforce HTTPS** and click **Apply**.
- Make sure that you’ve correctly configured the HTTPS host and that the hostname aliases point to the correct instance using DNS.
- Page Designer pages aren’t connected to the Content preview on either the old or new Storefront Toolkit.
- Make sure that all of your certificates are valid. If you have an invalid certificate, first open the storefront and allow an exception. Then open the Storefront Toolkit.
- For cookies, you must use the `Secure` attribute and set the `SameSite` attribute to None.
- The Storefront Toolkit uses an iframe to display your storefront. Avoid JavaScript that accesses the `window.top` or `window.parent` elements of the iframe. Make sure your code doesn’t write to `parent` in the global scope.
- Don’t use ClickJack Protection or Anti-ClickJack scripts, which can cause errors. Use the appropriate HTTP headers instead. For more information, see [Troubleshoot the Storefront Toolkit in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_troubleshooting_storefront_toolkit.htm&release=264.0.0&type=5 "Troubleshoot some common issues with the Storefront Toolkit.").