How to manage allowed domains for your chat widget in CornerSpot

Your allowed domains decide which websites are permitted to load your CornerSpot chat widget. The widget only runs on the domains you list — visitors loading it from any other origin are rejected. This guide shows you how to add, edit, and remove domains from the Live Chat settings.

How to manage allowed domains for your chat widget

Open Live Chat Settings and choose the Allowed domains tab at /dashboard/chat/settings/domains.

The Allowed domains tab in CornerSpot Live Chat Settings
The Allowed domains tab in Live Chat Settings.

1. Add a domain

Type the site's bare hostname — no scheme or port, for example shop.example.com — then click Add. The domain appears in the list marked Active, and the widget will load there straight away.

Typing a bare hostname into the CornerSpot allowed-domains quick-add box
Typing a bare hostname into the quick-add box.
A newly added allowed domain marked Active in CornerSpot
The new domain added to the allowlist, marked Active.

2. Edit a domain's options

Click Edit on any row to open its settings panel, where you can fine-tune three things:

Opening the edit panel for an allowed domain in CornerSpot
Opening the edit panel for a domain.
  • Include subdomains — match *.example.com so staging and preview hosts are accepted too.
  • Enabled — turn this off to revoke access without deleting the entry (reconnects fail immediately).
  • Note — an internal note for your team; it's never shown to visitors.
The CornerSpot allowed-domain edit panel with Include subdomains, Enabled, and Note options
The edit panel with Include subdomains, Enabled, and Note options.

When you're happy, click Save changes.

Adding an internal note before saving an allowed domain in CornerSpot
Adding an internal note before saving.

3. Remove a domain

To revoke a domain entirely, click Remove on its row. CornerSpot asks you to confirm — once you do, visitors loading the chat widget from that origin stop being accepted immediately.

Clicking Remove on an allowed-domain row in CornerSpot
Clicking Remove on a domain row.
Confirming removal in the CornerSpot Remove domain dialog
Confirming removal in the “Remove domain?” dialog.

Good to know

  • The widget only runs on listed domains. Any other origin is rejected, which keeps your chat from being embedded where you didn't intend.
  • Disable instead of delete when you want to pause a domain temporarily — just turn its Enabled toggle off.
  • Changes are cached. Origin checks are cached, so an add, edit, or removal takes effect within about five minutes.

Was this article helpful?