Manage which sites can show your widget
Every widget keeps a list of the sites that are allowed to display it, called the allowed sites list. A widget only loads on a site whose web address is on this list — this is how you keep your content from being embedded on sites you don’t control. This guide shows you how to add and remove sites.
Who can do this: Admins with the Web Editor role. Editing this list is recorded in your audit log.
Before you start
Section titled “Before you start”- Know the exact web address of each site that should show the widget.
- Each address must be a full site address that starts with
https://— for example,https://www.riversidegarden.org. It can’t include a page path, a query, or a#section — just the site.
- In the left sidebar, select Website, then Widgets.
- Find your widget in the list and select Configure.
- Go to the Allowed origins section.
- In the Allowed origin box, type a site address (for example,
https://www.riversidegarden.org), then select Add. - Repeat step 4 for every site that should show the widget. If your site answers at both
https://www.yoursite.organdhttps://yoursite.org, add both — they count as different addresses. - To stop a site from showing the widget, select Remove origin next to that address.
- Select Save changes.
Verify
Section titled “Verify”You’ll know it worked when each allowed site appears in the list under Allowed origins, and the widget loads on those sites. A site you removed stops showing the widget right away.
Why an empty list means the widget won’t load anywhere
Section titled “Why an empty list means the widget won’t load anywhere”The allowed sites list is closed by default: a widget shows only on the sites you add. That has one important consequence — if the list is empty, the widget won’t load on any site at all. Instead of guessing, MapleGather blocks the load and shows a short “This content isn’t authorized to appear on this site” message.
This is deliberate. It means a widget can never be embedded somewhere you didn’t approve, even by accident. When the list is empty you’ll see a notice that says the widget won’t load anywhere until you add at least one address. Add a site to switch the widget on.
If something goes wrong
Section titled “If something goes wrong”- “Enter a full web address like
https://www.example.org— no path or page.” — you included a page path, a?query, or a#section, or the address didn’t start withhttps://. Enter just the site address and select Add again. - The widget shows “This content isn’t authorized to appear on this site.” — the address it’s loading from isn’t on the list. See Fix “Embed not authorized”.