SCStartupCoreDOCS

SECURITY

Allowed domains

Widget embed restrictions.

Config

PATCH environment with allowedDomains — hostnames (startupcore.com) or host:port (localhost:3000). Widget POST /widget/sessions/anonymous and /widget/chatbots/{botId}/message validate Origin or Referer.

Examples

["startupcore.com","www.startupcore.com","localhost:3000","127.0.0.1:3000"] for marketing site + local dev.