Bind to Domain

MetaLocator can output a content security policy preventing embed of your Interface on other Websites

Michael Fatica avatar
Written by Michael Fatica
Updated over a week ago

Under Advanced Settings, see the "Bind to Domain" option

This setting should contain the list of valid URIs in which MetaLocator should allow your Interface to be IFRAME'd.

For example,

https://yourwebsite.com https://yourdevelopmentwebsite.com

Results in the following CSP:

MetaLocator domains are automatically appended to the allowed frame-ancestors.

The sites should be space-delimited, and should only contain protocol and domain information.

Be sure any variations on your domain, (such as with and without www) are listed.

Do not include path or query string information (E.g. yourwebsite.com/mytestpage.html)

Did this answer your question?