Script Attack Protection: Whitelisted Custom Code Elements and Attributes

The Script Attack Protection setting prevents the storage and execution of specific custom code in record values and views that are not whitelisted (see list below). The locations where Script Attack Protection is applied can be found here.

Please contact our support team via the chat widget in the Builder or by submitting this form if you're using a code element that you would like to see included in this whitelist.

Note: Script Attack Protection is not applied to the API & Code section of the app. Additionally, Rich Text views continue to allow scripts when this setting is enabled.