Updates to iFrames and Custom Elements
Updates to iFrames and Custom Elements
In order to improve the security of apps and components on Wix sites, we're planning to implement sandboxing on January 1st, 2025. This update may affect the function of some code in custom elements and iFrames.
Select a question to learn more about this update.
What does this update mean?
Sandboxing is a feature that restricts access to content / certain storage areas in an element.
With this update, access to certain storage areas in iFrames and custom elements (e.g. sessionStorage, cookies, cache etc.) will be limited - meaning they won't be as easily accessed by apps. Learn more about the update
Will this affect the live site?
The live version of the site will not be affected.
This change will impact the function of apps / components in your editor (Wix Editor or Studio Editor), and in Preview mode.
Do I need to make any changes?
If any code on the site currently has access to sessionStorage, localStorage, cookies, indexDB, and cache, we recommend updating the code to ensure it keeps functioning as expected.
If you're not using the code, you can still update it to ensure the security of the custom element / iFrame. Otherwise, you can delete the component from the site.
To delete the component:
Select the iFrame / custom element.
Press the Delete key on your keyboard.
Where can I find the impacted elements / code?
If you have a site that will be affected by this change, we sent you an email on the 24th of November. This email should advise you of the sites in your account that may be impacted by this update.
You can find the relevant elements / code by using the Layers panel in your editor.
How do I update the code?
There are a few actions you can take to update the code, including wrapping access to an API. Learn more about ways to update code
Important:
We cannot provide support for codes that were not created or tested by Wix. If you are experiencing an issue or require assistance with coding, please contact the developer or code provider.
Comments