---
schema_version: "1"
id: f81995ae12da2fd5fa41e01b8d3bf16e0345d5c13944109b999a2abfb884f0cc
title: IframeWhiteListUrl
collection: legacydeveloper
version: current
locale: en-us
portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_iframewhitelisturl.md
canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_iframewhitelisturl.htm
source_site: developer.salesforce.com
content_type: documentation
content_hash: b476b06fe9e256134f069e9fb82c3cafaf7788810e578e2a23f3f1fb7d7c2fe2
description: Represents a list of trusted external domains that you allow to frame your Embedded Service, Surveys, and Visualforce pages. This object is available in API version 45.0 and later.
---
# IframeWhiteListUrl

Represents a list of trusted external domains that you allow to frame your Embedded Service, Surveys, and Visualforce pages. This object is available in API version 45.0 and later.

![Important](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/images/icon_note_important.png)

#### Important

Where possible, we changed noninclusive terms to align with our company value of Equality. Because changing terms in our code can break current implementations, we maintained this object’s name.

## Supported Calls

create(), delete(), describeSObjects(), query(), retrieve(), update(), upsert()

## Fields

| Field Name | Details |
| --- | --- |
| Context | 
Type

picklist

Properties

Create, Defaulted on create, Filter, Group, Restricted picklist, Sort, Update

Description

The type of content in the iframe.

Valid values are:

- Surveys
- VisualforcePages
- DisclosureAndComplianceHubConnector





 |
| Url | 

Type

string

Properties

Create, Filter, Group, Nillable, Sort, Update

Description

The unique domain that is allowed to frame your Visualforce pages, surveys, or Disclosure and Compliance Hub Connector. Accepts these formats: example.com, \*example.com, and https://example.com.



 |

## Usage

To use this object for framing Visualforce pages, on Session Settings in Setup, select **Enable clickjack protection for customer Visualforce pages** either **with headers disabled** or **with standard headers**. These options both allow framing of Visualforce pages on trusted external domains and provide clickjack protection.

Alternatively, you can customize session settings via the SecuritySettings Metadata API type. To use the IframeWhiteListUrl object, set either the enableClickjackNonsetupUser or enableClickjackNonsetupUserHeaderless field to true. For more information, see [SecuritySettings](https://developer.salesforce.com/docs/atlas.en-us.264.0.api_meta.meta/api_meta/meta_securitysettings.htm) in the Metadata API Developer Guide.