Skip to content

Commit 22aa0dd

Browse files
remove useless sentences
1 parent 1d152a7 commit 22aa0dd

File tree

1 file changed

+6
-12
lines changed

1 file changed

+6
-12
lines changed

content/extensions/ui-extensions.md

Lines changed: 6 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -215,6 +215,12 @@ For more detailed information, you can refer to the [Mozilla Developer Network (
215215

216216
To configure an `iframe` UI extension, mandatory fields are `name`, `position`, `type`, and `configuration`. Inside `configuration`, mandatory options are `default_label`, `secret` and `url`.
217217

218+
::: warning
219+
**Important security notice**
220+
221+
For sensitive data, we recommend implementing [security measures](#ensuring-security-of-embedded-iframes) to protect your information.
222+
:::
223+
218224
#### Default query parameters
219225
To help identify the **iframe** caller (insecure) and context, several parameters are sent by default as SearchParameters in the GET query.
220226

@@ -228,18 +234,6 @@ For all positions, parameters relative to the connected user and the extension p
228234
- `user[catalog_scope]` except for `pim.product-grid.action-bar`
229235
- `position`
230236

231-
::: warning
232-
**Important security notice**
233-
234-
When using iframes, please be aware of the following:
235-
236-
+ **Data confidentiality**: We do not implement any security measures to verify the identity of the caller accessing the URL.
237-
238-
+ **Access control**: Anyone with access to this link can view the content of the webpage, regardless of the parameters included.
239-
240-
For sensitive data, we recommend implementing [additional security measures](#ensuring-security-of-embedded-iframes) to protect your information.
241-
:::
242-
243237
For `pim.product.tab` position, these parameters are sent:
244238
- `product[uuid]`
245239
- `product[identifier]`

0 commit comments

Comments
 (0)