---
schema_version: "1"
id: f15a0d4fa38e633aecb9e7a5a464ae370d8ca2d3253482be9716ba07c28609e8
title: Other Security Changes
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_security_other_changes.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_other_changes.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1bae7ebbd88dc29725b73583f423717229a13b7e93c97c5425712916ad9aaee3
description: Identify and remove malformed trusted URLs. Use a smaller Content Security Policy (CSP) header size to reduce failures when other sites serve content from your org.
products:
  - Cross Cloud
release: "262"
---
# Other Security Changes

Identify and remove malformed trusted URLs. Use a smaller Content Security Policy (CSP) header size to reduce failures when other sites serve content from your org.

- **[Follow Size Guidance for CSP Headers](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_csp_header_size_guidance.htm&release=262.0.0&type=5)**  
    Provide a reliable experience when external sites serve content from your org in an iFrame. Target a Content Security Policy (CSP) header under 12 KB to reduce failures caused by infrastructure limits on HTTP header size. Customers report issues as headers approach 16 KB, and third-party processing can increase header size.
- **[Identify and Remove Malformed Trusted URLs](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_malformed_trusted_urls.htm&release=262.0.0&type=5)**  
    Salesforce now excludes malformed URLs from generated Content Security Policy (CSP) HTTP headers. To keep your Trusted URLs list accurate, remove any malformed entries.