How to set up a protected Support Center?

To increase the level of security, Bold360 ai version 4.72 (April 2019) introduced Cross-origin resource sharing (CORS) policies to the APIs. This enhancement enables you to restrict your widgets and Support Centers to a single URL domain or a list of domains. If a malicious intruder copies your HTML snippet code and adds it to any other site, the widget or Support Center on that site will not work.

What has changed in the Support Center setup?

Until now, you could define the URL of a secure Support Center in the Main Site URL field on the Touchpoints > Support Center > Settings page.

From now on, to set up a secure Support Center, do the following:

  1. On the Touchpoints > Support Center > Settings page, copy your Support Center URL from the Main Site URL field.
  2. Go to the Admin Center > Preferences page.
  3. In the Allowed Origins field, paste your Support Center URL that you have copied from the Main Site URL field.
  4. Add your main customer website URL to the list.
  5. Save your changes.

What if you do not change your existing Support Center setup?

Your Support Center will still work, but it will lose its protection: anyone will be able to copy the support snippet and paste it into another website.