Now you can specify the third-party domains that you trust to frame your Aura or LWR site. For consistency, the labels for adding trusted domains for clickjack protection on Visualforce pages are updated. Previously, the Trusted Domains list was titled Domains, and the Add Trusted Domain button was labeled Add Domain.
Where: This change applies to Aura and LWR sites accessed through Lightning Experience and Salesforce Classic in Enterprise, Performance, Unlimited, and Developer editions. This feature isn’t available for enhanced LWR sites.
How: In Experience Builder, select Settings, then select Security & Privacy. Under Clickjack Protection Level, select Allow framing of site pages on external domains (good protection). To allow a third-party domain to frame your site, click Add Trusted Domain.
Specify Trusted Domains for Clickjack Protection on Your Site (salesforce.com)