Identify and remove malformed trusted URLs. Use a smaller Content Security Policy (CSP) header size to reduce failures when other sites serve content from your org.
- Follow Size Guidance for CSP Headers
Provide a reliable experience when external sites serve content from your org in an iFrame. Target a Content Security Policy (CSP) header under 12 KB to reduce failures caused by infrastructure limits on HTTP header size. Customers report issues as headers approach 16 KB, and third-party processing can increase header size. - Identify and Remove Malformed Trusted URLs
Salesforce now excludes malformed URLs from generated Content Security Policy (CSP) HTTP headers. To keep your Trusted URLs list accurate, remove any malformed entries.