Configure the allowed domains list for iFraming in Composer

Misty Flowers

May 08, 2017 12:01

This article covers how to configure the allowed domains list for iFraming and iFrames in Finalsite's Composer, including which content types are affected and the correct domain format to enter.

💡Quick answers

Where is the allowed domains list configured? Hover over the domain in Composer's left navigation, click the three-dot menu, and select Settings. The Domain settings window includes an Allowed domains for iFraming section.
Why isn't an embedded form, media object, or page showing on another site? The third-party site displaying that content in an iFrame likely isn't on the allowed domains list yet, so Composer blocks the content until the domain is added.
What format should a domain be entered in? Enter the full URL, including https:// or http://, matching how the third-party page actually loads.
Does the allowed domains list affect content shared on social media? No. Content shared through platforms such as Facebook or Flickr is unaffected, since those platforms do not display content in an iFrame.
Can Composer pages be shared in an iFrame using this list? Yes. Because the list is a domain-level setting in Composer, adding a third-party domain here allows that domain to display this site's Composer pages, forms, and media objects in an iFrame.

What the allowed domains list controls

Any third-party website that displays this site's content in an iFrame must be added to the Allowed domains for iFraming list first, or the content will not load. This covers embedded forms, media objects, and Composer pages. Content shared through social platforms is not affected, since those platforms do not rely on iFrames.

If a form, file, or media object is embedded on a site that isn't yet on the list, that content stops displaying. Add the domain right away to keep embedded content accessible.

Configure the allowed domains list

Locate Domain settings

Domain Settings controls configurations that affect every page within a domain. Open it by hovering over the domain in Composer left nav, clicking the three-dot menu, and selecting Settings.

Step 1: Hover over the domain in Composer's left navigation.
Step 2: Click the three-dot menu and select Settings.
Step 3: In the Domain settings window, scroll down to find the Allowed domains for iFraming section.

Add a domain

Step 1: Click + Add domain.
Step 2: Enter the domain or multiple domain variations that you wish to display this site's content in an iFrame.
Step 3: Repeat for each additional domain, then click Apply to save changes.

Important Note

Content security policy settings may appear below Allowed domains for iFraming on some accounts. These settings are not enabled for every client by default and are outside the scope of this article.

Format the domain entry correctly

Enter the complete URL for each domain, including https:// or http://, and include www. only if the third-party site uses it. For example, if a school's athletics page embeds content at https://www.thirdpartysite.com/athletics, add https://www.thirdpartysite.com to the list. If the same content is reachable over both http and https, add both versions.

Troubleshoot: Embedded content not displaying on a third-party site

Confirm the domain displaying the embedded form, media object, or Composer page is listed under Allowed domains for iFraming. If the domain is missing, add it using the steps above; the content becomes accessible again once the list is saved.