Skip to content

Commit cc9dcd8

Browse files
dcpenapatriciasantaana
authored andcommitted
[Stream] Adding additional info about Allowed Origins (#17331)
* Adding additional info about Allowed Origins * Update src/content/docs/stream/viewing-videos/securing-your-stream.mdx Co-authored-by: Patricia Santa Ana <[email protected]> --------- Co-authored-by: Patricia Santa Ana <[email protected]>
1 parent 0785385 commit cc9dcd8

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

src/content/docs/stream/viewing-videos/securing-your-stream.mdx

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -363,11 +363,11 @@ If the first two rules don't match, the final rule of any will match all remaini
363363
By default, Stream embed codes can be used on any domain. If needed, you can limit the domains a video can be embedded on from the Stream dashboard.
364364

365365
In the dashboard, you will see a text box by each video labeled `Enter allowed origin domains separated by commas`. If you click on it, you can list the domains that the Stream embed code should be able to be used on.
366-
367-
* `*.badtortilla.com` covers a.badtortilla.com, a.b.badtortilla.com and does not cover badtortilla.com
366+
`
367+
* `*.badtortilla.com` covers `a.badtortilla.com`, `a.b.badtortilla.com` and does not cover `badtortilla.com`
368368
* `example.com` does not cover [www.example.com](http://www.example.com) or any subdomain of example.com
369369
* `localhost` requires a port if it is not being served over HTTP on port 80 or over HTTPS on port 443
370-
* There's no path support - `example.com` covers example.com/\*
370+
* There is no path support - `example.com` covers `example.com/\*`
371371

372372
You can also control embed limitation programmatically using the Stream API. `uid` in the example below refers to the video id.
373373

@@ -377,6 +377,10 @@ curl https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/{video_ui
377377
--data "{\"uid\": \"<VIDEO_UID>\", \"allowedOrigins\": [\"example.com\"]}"
378378
```
379379

380+
### Allowed Origins
381+
382+
The Allowed Origins feature lets you specify which origins are allowed for playback. This feature works even if you are using your own video player. When using your own video player, Allowed Origins restricts which domain the HLS/DASH manifests and the video segments can be requested from.
383+
380384
### Signed URLs
381385

382386
Combining signed URLs with embedding restrictions allows you to strongly control how your videos are viewed. This lets you serve only trusted users while preventing the signed URL from being hosted on an unknown site.

0 commit comments

Comments
 (0)