[{"data":1,"prerenderedAt":52},["ShallowReactive",2],{"content:changelog:\u002Fchangelog\u002F2026-10-23-allowed-domains":3},{"id":4,"title":5,"body":6,"canonical":39,"date":40,"description":41,"draft":42,"extension":43,"locale":44,"meta":45,"navigation":46,"noindex":42,"og":39,"path":47,"seo":48,"stem":49,"tag":50,"updated":40,"__hash__":51},"changelog\u002Fchangelog\u002F2026-10-23-allowed-domains.md","Choose which sites can use your public keys",{"type":7,"value":8,"toc":35},"minimark",[9,26],[10,11,12,13,17,18,21,22,25],"p",{},"Public keys now only accept requests from websites you list. Add them under Settings, Public keys, in the new Allowed domains card. Enter a hostname such as ",[14,15,16],"code",{},"app.example.com",", or ",[14,19,20],{},"*.example.com"," to cover every subdomain. ",[14,23,24],{},"localhost"," is accepted for development. Internationalised domain names are stored in their ASCII form. If the list is empty, public keys refuse every request, so add your sites before you go live.",[10,27,28,29,34],{},"See the ",[30,31,33],"a",{"href":32},"\u002Fintegrations\u002Frest-api","REST API guide",".",{"title":36,"searchDepth":37,"depth":37,"links":38},"",2,[],null,"2026-10-23","Set the list of websites allowed to send events with your public keys, with wildcard support.",false,"md","en",{},true,"\u002Fchangelog\u002F2026-10-23-allowed-domains",{"title":5,"description":41},"changelog\u002F2026-10-23-allowed-domains","security","D1BAqbkJ9cZKakASP5mIKwTYdSsT3MhtQdmP7nRT_kM",1793908078666]