Allowlisting your domain

You will need to allowlist your development, staging, and production domains in Explo to enable the embedded component to communicate with our API. For development purposes, we have localhost on ports 3000, 3001, 3002, 6700, 8080 allowlisted already.

To add a allowlist rule, go to the Domain Allowlisting section of the settings page. There’ll you’ll see a list of all the rules your team has added, as well as both a button to add more rules and a text input field that you can use to test a url against your rules.

The following are notes about how Explo allowlisting works:

• Explo’s allowlist supports both hardcoded domains and domains that use an asterisk (*) as a wildcard

  • https://testing.explo.co and https://*.explo.co will both allowlist https://testing.explo.co, but the second rule would also allowlist https://staging.explo.co

• A wildcard only applies to a single subdomain (the portion of a url between two periods)

  • https://..explo.co would allowlist https://site.testing.explo.co, but https://*.explo.co would not

• Wildcards can also be mixed with hardcoded text within a subdomain

  • https://explo-\*.co allowlists https://explo-testing.co and https://explo-staging.co

• The www is not required for the allowlist rules

  • https://explo.co allowlists both https://www.explo.co and https://explo.co

• You must include a protocol (http or https) in your allowlist rule, and this cannot be wildcarded