Limit the domain names that video can be played from
Via the Studio
example.com
, subdomain.example.com
or *.example.com
(for wildcard matching).Via the API
allowed_domains
array containing the domains you wish to allow playback from.
Each item should take the format of example.com
, subdomain.example.com
or *.example.com
(for wildcard matching).referrer
and origin
headers, which are not commonly used in mobile/TV apps, are not always reliable on web. These headers can be spoofed by the client, so this should not be used as the only security measure.