---
title: "Appropriate Setting for Dynamics Security Controls (DM Integrations)"
slug: "integrate-autoform-dm-iframes-dynamics-security-controls"
description: "This page describes the \"Restrict cross-frame scripting\" setting (in Microsoft Dynamics) which must be turned off when Autoform DM is integrated with Dynamics CE."
updated: 2024-02-15T10:19:01Z
published: 2024-02-15T10:19:01Z
canonical: "kb.lasernetgroup.com/integrate-autoform-dm-iframes-dynamics-security-controls"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.lasernetgroup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Dynamics Security Controls

Dynamics provides a security control when using iframes named **Restrict cross-frame scripting**. This locks down an iframe so that it cannot execute scripts, load plugins, submit forms, etc, to prevent any malicious activity.

This should not be used for iframes hosting DM applications because it will prevent the application from functioning. The intention for this security control is to restrict untrusted content. However, the only content loaded into the integration iframe is the DM application, which itself has security controls in place (as outlined in more detail in the rest of the document) and has had penetration testing performed upon it. Therefore, this option should be considered not applicable.