Clayton

JavaScript of any type is not allowed to run within the Salesforce.com application context. This includes JavaScript blocks within HomePageComponents, WebLinks, Custom buttons, and all other components run under the Salesforce DOM.

<a href="https://developer.salesforce.com/docs/atlas.en-us.pages.meta/pages/pages_security_tips_xss.htm" rel="nofollow noopener noreferrer" target="_blank">Cross-Site Scripting (XSS)</a>

<a href="https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html" rel="nofollow noopener noreferrer" target="_blank">Cross Site Scripting Prevention Cheat Sheet</a>

<a href="https://developer.salesforce.com/docs/atlas.en-us.secure_coding_guide.meta/secure_coding_guide/secure_coding_cross_site_scripting.htm" rel="nofollow noopener noreferrer" target="_blank">Secure Coding Cross Site Scripting</a>

<a href="https://trailhead.salesforce.com/en/content/learn/modules/secure-clientside-development/mitigate-crosssite-scripting" rel="nofollow noopener noreferrer" target="_blank">Mitigate Cross-Site Scripting</a>

<a href="https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_weblink.htm" rel="nofollow noopener noreferrer" target="_blank">WebLink</a>

- <a href="https://developer.salesforce.com/docs/atlas.en-us.pages.meta/pages/pages_security_tips_xss.htm" rel="nofollow noopener noreferrer" target="_blank">Cross-Site Scripting (XSS)</a>
- <a href="https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html" rel="nofollow noopener noreferrer" target="_blank">Cross Site Scripting Prevention Cheat Sheet</a>
- <a href="https://developer.salesforce.com/docs/atlas.en-us.secure_coding_guide.meta/secure_coding_guide/secure_coding_cross_site_scripting.htm" rel="nofollow noopener noreferrer" target="_blank">Secure Coding Cross Site Scripting</a>
- <a href="https://trailhead.salesforce.com/en/content/learn/modules/secure-clientside-development/mitigate-crosssite-scripting" rel="nofollow noopener noreferrer" target="_blank">Mitigate Cross-Site Scripting</a>
- <a href="https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_weblink.htm" rel="nofollow noopener noreferrer" target="_blank">WebLink</a>
   

Use of JavaScript in WebLinks

Home

Find answers and get help from Intercom Support and Community Experts

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Link, Press control-option-right-arrow to exit

Empty Help Center

Uh oh. That page doesn’t exist.

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

Use of JavaScript in WebLinks

Rationale

Scope

Related resources