Domain restriction for the knowledge base widget

Document360 lets you restrict the knowledge base widget to specific domains. Once a domain is added to the widget security list, any project member who wants to install the knowledge base widget on a different domain must add that domain to the Widget security section.

If no domains are added to the list, the knowledge base widget can be embedded into any SaaS application or public website without restriction.

NOTE
The knowledge base widget API key is visible in plain text within the widget JavaScript code and cannot be encrypted. Configuring trusted domains is the recommended way to prevent unauthorized use of your widget. Once domains are added, the widget will only load on those specified domains, any attempt to embed it on an unlisted domain will be blocked. If no trusted domains are configured, the widget can be embedded on any domain, increasing the risk of unauthorized use.

How to restrict the knowledge base widget to a specific domain

1. Navigate to Connections () > Knowledge base widget in the left navigation bar.
2. Hover over the desired widget and click the Edit () icon.
3. In the Configure & connect tab, expand the Widget security accordion. You can find the list of domains previously added (if added).
4. Enter the domain where you want the knowledge base widget to be displayed.
5. Click Add and click Save to apply changes.

NOTE
The "www" is not a valid part of your domain. Only add what comes after the www. in your URL.
Example: document360.com

• Wildcard notation is not supported. You cannot use *.domain.com to allow all subdomains at once.

• URL paths are not supported. Entries like domain.com/path/page are not valid.

• Adding the parent domain is sufficient. If you add group.docuware.cloud, all subdomains under it (e.g., team1.group.docuware.cloud) will be allowed automatically without needing to be added individually.

• Leaving the list empty allows the widget to be embedded on any domain or subdomain without restriction.

FAQ