---
schema_version: "1"
id: e806f13d30e7bb8502d21b9fefd6ef2321921c41800aec89a31bd45e1272c273
title: Identify and Remove Malformed Trusted URLs
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_security_malformed_trusted_urls.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_malformed_trusted_urls.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1833f5152ecd88dd7ff1fa254e6a13683aafa476da1a69d3417b093544072e2a
description: Salesforce now excludes malformed URLs from generated Content Security Policy (CSP) HTTP headers. To keep your Trusted URLs list accurate, remove any malformed entries.
products:
  - Cross Cloud
release: "262"
---
# Identify and Remove Malformed Trusted URLs

Salesforce now excludes malformed URLs from generated Content Security Policy (CSP) HTTP headers. To keep your Trusted URLs list accurate, remove any malformed entries.

**Where:** This change applies to Lightning Experience and Salesforce Classic in Enterprise, Performance, Unlimited, and Developer editions.

**Who:** This change applies to orgs created before Spring ’25. Starting with that release, admins can’t save a malformed URL as a trusted URL. If an org has malformed URLs in its list, an admin added them before February 2025.

**How:** From Setup, in the Quick Find box, enter Trusted URLs, and then select **Trusted URLs**. Check for malformed URLs in the URL field. Or review the EndpointUrl field on the CspTrustedSite object. Delete or update any trusted URLs with a malformed URL.

To find all malformed URLs with an Apex class, see [Identify Malformed Trusted URLs](https://help.salesforce.com/s/articleView?id=005317938&type=1&language=en_US).

#### See Also

- [_Salesforce Help_: Manage Trusted URLs](https://help.salesforce.com/s/articleView?id=xcloud.security_trusted_urls_manage.htm&type=5&language=en_US)
- [_Object Reference for the Salesforce Platform_: CspTrustedSite](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_csptrustedsite.htm)