Does Salesforce's Content Security Policy update affect Simple Survey?

Salesforce is releasing an update for Winter '25 (https://help.salesforce.com/s/articleView?id=release-notes.rn_security_other_updated_csp_ru.htm&release=250&type=5), which requires changes to prevent cross-site scripting and other code injection attacks when using an iFrame on a Lightning Page. Does this affect Simple Survey?

  • Oct 30, 2025
  • Knowledge

Permalink
https://kb.vicasso.com/?kb=000005364
Details

Per Salesforce's article, if a content security policy is not declared for sites utilizing iframes in Salesforce Orgs, they could block externally hosted fonts and images, and even prevent external websites from loading within an iframe on Lightning pages. 

 

Simple Survey utilizes a Salesforce-hosted site to display the survey on a landing page, but unless you have those running as an iframe in a Lightning Community, there are no impacts to your Organization. It is most likely that this is not the case for most organizations, as the survey landing page is accessed by respondents without authenticating to any community pages. 

 

For further assistance in identifying how the survey landing pages are running in your Org, please contact your Salesforce Administrator.

 

 

 

 

Title
Does Salesforce's Content Security Policy update affect Simple Survey?
URL Name
Does-Salesforce-s-Content-Security-Policy-update-affect-Simple-Survey