Beginning with this release, for security reasons, only Business Manager users with strong authentication, such as through multi-factor authentication with Account Manager, can embed JavaScript in HTML attributes. To make it easier to adjust to this change, a Business Manager user with strong authentication can temporarily allow users without strong authentication to include JavaScript in HTML attributes.
How: To temporarily allow users without strong authentication to include JavaScript in HTML attributes, a strongly authenticated Business Manager user goes to and clicks Enable. For one hour, users without strong authentication can embed JavaScript in HTML attributes.
Note Separate from the issue of JavaScript in HTML attributes, Salesforce
strongly recommends that you implement multi-factor authentication for all Business Manager
users.
Note This release note was updated for clarity.