Domain Origin Lock

Security • Section 2.4

Prevent unauthorized embeds by restricting widget execution exclusively to approved domain hostnames.

Domain lock and geofencing.

Allowed Domains Configuration

List your authorized production, staging, and development domains to restrict widget execution exclusively.

Domain Allowlist Enforcement

List your authorized production, staging, and development domains (e.g. https://yourdomain.com, http://localhost:3000). Any attempt to embed your widget token on an unlisted domain is immediately blocked.