---
schema_version: "1"
id: 82d08e783a443fce12aa9ce63a0e31e6942ad63403090766727357b313a0389b
title: JavaScript in HTML Attributes Allowed Only with Strong Authentication
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_20_9_w7874006_javascript_in_html_la.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_20_9_w7874006_javascript_in_html_la.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 016c0c515adf273eb9b90c4735a92d3d06558baeacceb8c7a9fd08262020c910
description: Beginning with this release, for security reasons, only Business Manager users with strong authentication, such as through multi-factor authentication with Account Manager, can embed JavaScript in HTML attributes. To make it easier to adjust to this change, a Business Manager user with strong authentication can temporarily allow users without strong authentication to include JavaScript in HTML attributes.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# JavaScript in HTML Attributes Allowed Only with Strong Authentication

Beginning with this release, for security reasons, only Business Manager users with strong authentication, such as through multi-factor authentication with Account Manager, can embed JavaScript in HTML attributes. To make it easier to adjust to this change, a Business Manager user with strong authentication can temporarily allow users without strong authentication to include JavaScript in HTML attributes.

How: To temporarily allow users without strong authentication to include JavaScript in HTML attributes, a strongly authenticated Business Manager user goes to **Administration** | **Global Preferences** | **JavaScript in Attributes** and clicks **Enable**. For one hour, users without strong authentication can embed JavaScript in HTML attributes.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-b2c_commerce_release_notes-264-0-0-production-enus/4ec7e638-d25e-4c65-96ec-ec874bcf5183/images/icon_note.png)

Note Separate from the issue of JavaScript in HTML attributes, Salesforce strongly recommends that you implement multi-factor authentication for all Business Manager users.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-b2c_commerce_release_notes-264-0-0-production-enus/4ec7e638-d25e-4c65-96ec-ec874bcf5183/images/icon_note.png)

Note This release note was updated for clarity.

#### See Also

- [JavaScript in HTML Attributes](https://documentation.b2c.commercecloud.salesforce.com/DOC3/topic/com.demandware.dochelp/content/b2c_commerce/topics/admin/b2c_javascript_in_html_attributes.html)