Skip to main content

Whitelisting Domains

Whitelisting Domains is a powerful security feature that gives you control over which domains are permitted to embed VP Player instances or load associated player scripts. This helps prevent unauthorized use of your video content and assets, ensuring they are only accessible and functional on trusted sites.

Why Whitelisting Domains?​

Whitelisting protects your content by limiting access to a defined set of domains. This ensures:

  • Only approved websites can embed public videos
  • Only trusted domains can load player scripts
  • Third-party or malicious sites cannot mirror or hijack your content
  • A secure environment for content distribution and playback

This feature is especially critical when working with publicly accessible media and embed codes.

How Whitelisting Works​

When a domain is whitelisted, the system checks the origin of incoming requests to determine whether access should be granted. If a request comes from a domain not included in the whitelist, access to the player scripts or video embeds will be blocked.

Each whitelisted domain entry can be individually activated or deactivated, giving platform admins fine-grained control without needing to delete or reconfigure the domain. Deactivating a domain immediately blocks future requests from that domain.

info

If no domains are active, all attempts to embed videos or load scripts will be allowed.

Use Cases​

Whitelisting is commonly used for:

  • Embedding a public video on your company website (www.company.com)
  • Loading scripts from a custom landing page (media.company.com)
  • Allowing third-party partners to embed videos on their own domains (partner1.com)

Wildcard Support​

Wildcard domains are supported to simplify domain management. You can use * to match all subdomains of a domain:

  • *.example.com matches:
    • www.example.com
    • example.com
    • media.example.com
    • dashboard.example.com

Activation & Failure Handling​

Each whitelisted domain has a status toggle:

  • Active: The domain is currently permitted to access system resources.
  • Inactive: The domain is registered but temporarily disabled.

If a domain is misconfigured or leads to repeated access issues, the user can manually deactivate it.