Skip to content
MapleGatherMapleGather Help

Fix \"Embed not authorized\"

You added a widget to your site, but instead of your events, directory, or donation form, the widget shows a short message: “This content isn’t authorized to appear on this site.”

What’s happening

Section titled “What’s happening”

A widget only loads on the sites you’ve allowed. When it’s loaded from a site that isn’t on the widget’s allowed sites list, MapleGather blocks it and shows this message instead of your content. Nothing is broken — the widget is doing exactly what it should. You just need to add the site to the list.

There are two common reasons you see this:

  • The site’s web address isn’t on the widget’s allowed sites list.
  • The allowed sites list is empty, so the widget won’t load anywhere yet.

Each time a load is blocked, MapleGather records the site it came from so you can see it and fix it.

How to fix it

Section titled “How to fix it”
  1. In the left sidebar, select Website, then Widgets.
  2. Find your widget and select Configure.
  3. Select the Blocked origins tab. This lists the sites where loads were recently blocked, most recent first.
  4. Find the address of your own site in the list and select Add to allowlist next to it. This drops the address into the Allowed origin box on the Configure tab.
  5. You’re now on the Configure tab with the address in the Allowed origin box — select Add, then Save changes.
  6. Reload the page on your own site. The widget now shows your content.

If your site’s address isn’t in the Blocked origins list yet, add it by hand instead: on the Configure tab, type the full address (for example, https://www.riversidegarden.org) into Allowed origin, select Add, then Save changes. See Manage which sites can show your widget.

If that didn’t work

Section titled “If that didn’t work”
  • You added the address but still see the message. Your site may answer at more than one address — for example, with and without www. Add both https://www.yoursite.org and https://yoursite.org. Check the Blocked origins tab to see the exact address the block came from, and add that one.
  • The address was rejected when you tried to add it. The list only accepts a full site address that starts with https://, with no page path, query, or # section. Enter just the site address.
  • The Blocked origins tab shows the address as “(missing)”. The widget was loaded without MapleGather’s loader script — for example, a hand-written iframe — so no site address reached MapleGather and no allowed site can match. Paste the widget’s embed code into your site again, unchanged. See Embed a widget on your existing website.
  • The address includes a port (for example, https://yoursite.org:8443). The port is part of the address, so add it exactly as the Blocked origins tab shows it.
Section titled “Related”