Embedded Objects Not Allowed in HTML Attributes

For security reasons, only Business Manager users with strong authentication, such as through multi-factor authentication with Account Manager, can include objects embedded with iframe, object, applet, or embed tags in the HTML attributes of a database object. A Business Manager user with strong authentication can temporarily allow users without strong authentication to embed objects in HTML attributes.

How: To temporarily allow users to embed objects, go to Administration | Global Preferences | JavaScript in Attributes, and click Enable. Users without strong authentication can embed objects in HTML attributes for 1 hour.