---
schema_version: "1"
id: 797ff065c9d7452e88f6b55c7869cb39eb0dbfcf273862aa374be3fe51809aac
title: A New Quota and Logging for Objects Embedded in HTML Attributes Were Added
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/rn_new_quota_b2c_21_2_w8520607_la.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.rn_new_quota_b2c_21_2_w8520607_la.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: bc5eb22bf38cd77713f41bfab9286f63f21deda61a2ab0e6234468e1b0d1b8f7
description: Starting with Release 21.3, only users with strong authentication, such as through MFA with Account Manager, can include objects embedded with iframe, object, applet, or embed tags into HTML attributes. A new quota implemented in Release 21.2, api.object.EmbeddedObjectInHTMLAttributeUserWithoutStrongAuth, helps you to prepare for the upcoming 21.3 restriction. Use the new quota to see if you have objects embedded in HTML attributes and if so, make sure that users who embed such objects use strong authentication.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# A New Quota and Logging for Objects Embedded in HTML Attributes Were Added

Starting with Release 21.3, only users with strong authentication, such as through MFA with Account Manager, can include objects embedded with iframe, object, applet, or embed tags into HTML attributes. A new quota implemented in Release 21.2, `api.object.EmbeddedObjectInHTMLAttributeUserWithoutStrongAuth`, helps you to prepare for the upcoming 21.3 restriction. Use the new quota to see if you have objects embedded in HTML attributes and if so, make sure that users who embed such objects use strong authentication.

How: Also starting with Release 21.2, changes to HTML attributes that include embedding objects are recorded in the security logs.

The restrictions on embedded objects in HTML attributes are similar to restrictions previously implemented for JavaScript in HTML attributes.

#### See Also

- [JavaScript In HTML Attributes](https://documentation.b2c.commercecloud.salesforce.com/DOC1/index.jsp?topic=%2Fcom.demandware.dochelp%2Fcontent%2Fb2c_commerce%2Ftopics%2Fadmin%2Fb2c_javascript_in_html_attributes.html)