Whitelisting of URLs | Zoho Creator Help

Whitelisting of URLs

NotesThis help page is for users in Creator 6. If you are in the older version (Creator 5), click here. Know your Creator version.
By default, widgets in Zoho Creator can only access Creator’s own servers. Any requests made to external URLs will be blocked unless those URLs are explicitly whitelisted.
Whitelisting is the process of specifying external domains that your widget is allowed to communicate with, beyond the default Creator endpoints. This is especially useful when you're using client libraries or integrating with third-party services.

When to Whitelist URLs

If your widget needs to use any external client libraries or connect to services outside Creator, you must whitelist the required domains to allow access.
  1. Install the Command Line Interface(CLI). Learn more
  2. Open your project folder. Locate the plugin-manifest.json file in the folder.
  3. Add the Domains to be whitelisted in the "plugin-manifest.json" file.
  4. Pack the ZIP using the CLI client. Learn more
  5. Upload this ZIP to Zoho Creator.

Syntax

{
  "service": "CREATOR",
  "cspDomains": {
    "connect-src": [
      "domain1",
      "domain2",
      "domain3"
    ]
 }
}

Example

{
  "service": "CREATOR",
  "cspDomains": {
    "connect-src": [
      "wss://*.zohopublic.com",
      "https://*.zoho.com",
      "https://*.zohopublic.com"
    ]
 }
}