---
schema_version: "1"
id: 047aa1717154bcfbef1e05260f720cfee2e11cf235de39e0caf6858e50902c91
title: Control Which External Domains Can Frame Your Visualforce Pages
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_mobile_iframe_trusted_domains.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_mobile_iframe_trusted_domains.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0e03214a4e10990a5ae6642dd78624e224d82e357473f8942052abcb012e649b
description: External domains can frame your Visualforce pages or surveys in an inline frame (iframe) only when you add them to an allowlist. To let a trusted site load a Visualforce page or survey in an iframe, add its domain in Session Settings and set the iframe type to Visualforce Pages. Domains that aren't on the allowlist can't frame your pages.
products:
  - Cross Cloud
release: "264"
---
# Control Which External Domains Can Frame Your Visualforce Pages

External domains can frame your Visualforce pages or surveys in an inline frame (iframe) only when you add them to an allowlist. To let a trusted site load a Visualforce page or survey in an iframe, add its domain in Session Settings and set the iframe type to Visualforce Pages. Domains that aren't on the allowlist can't frame your pages.

**Where:** This change applies to the Salesforce mobile app for iOS and Android.

**How:** From Setup, in the Quick Find box, enter Session Settings, and then select Session Settings. In the Trusted Domains for Inline Frames section, click **Add Domain**, enter the domain, and select the **Visualforce Pages** iframe type. Acceptable domain formats are `example.com`, `https://example.com`, and `*.example.com`.

#### See Also

- [_Salesforce Help_: Specify Trusted Domains for Inline Frames](https://help.salesforce.com/s/articleView?id=xcloud.security_clickjack_specify_iframe_trusted_domains.htm&type=5&language=en_US)