Loading
시스템 관리자에 대한 피싱 방지 MFA 및 전 직원사용자 MFA 적용 안내 더 많이 읽기

Scripts and Styles with Absolute URLs Don’t Load in Salesforce ltng:require After Summer ’26

게시 일자: Jul 29, 2026
상세 설명

In Summer ’26, we made an update to the markup://ltng:require Aura component that fixed a security vulnerability. This fix restricted scripts that reference URLs to only support URLs that match the page origin. All external absolute URLs are rejected.

If your org uses absolute URLs with ltng:require, the Summer ‘26 fix can cause the component to not work properly.

솔루션

One workaround for this script restriction on external absolute URLs being rejected is to update your scripts and styles to use relative URLs (/resource/scriptName) instead where possible.

In some orgs, if the AuraSecStaticResCRUCPerm and AuraSecStaticResCRUCPref settings are enabled, the $Resource resolves to the VF domain, which may differ from the page origin. Contact Salesforce Customer Support to disable these settings if you’re encountering this issue. 

We’re working on a fix that will allow external absolute URLs if they’re in the Lightning or VF domain, or if they’re in your list of Trusted URLs in Setup.

In anticipation of the upcoming fix, we recommend that you add any external absolute URL you want to keep using with this component to the Trusted URLs list.

 

추가 자원

Lightning Aura Components Developer Guide: Using External CSS

Lightning Component Reference: Require | Legacy Components

Knowledge 기사 번호

005390235

 
로드 중
Salesforce Help | Article