Domain Restriction

Domain restriction, or domain whitelisting, allows embedded video to play only on approved websites, checking the requesting domain or referrer before serving the stream. It stops copied embed codes and hotlinking from working on unauthorized sites, keeping paid content on the platforms you control.

What is Domain Restriction?

Domain restriction, also called domain whitelisting, allows embedded video to play only on the websites you approve. If the player is placed on any other domain, playback is refused.

How It Works

When a player loads, the platform checks the requesting domain or referrer against your whitelist before serving the manifest or license. An embed copied to an unauthorized site fails the check and will not play, even though the embed code itself was copied correctly.

What It Prevents

  • Embed theft: Copied iframe or player code will not work off your domains.
  • Hotlinking: Others cannot serve your video from their pages.
  • Leak containment: Paid content stays on the sites you control.

For Platform Owners

Domain restriction pairs naturally with token or OTP playback: even if someone copies your embed and spoofs a referrer, session-bound authorization stops the stream. Together they keep content on authorized platforms only.