Skip to main content
Apps run in a sandboxed iframe with strict security controls by default. App-level settings let you enable specific features on a per-app basis, giving you fine-grained control over what each app can do.

​
Requirements

Editor permissions or higher on a document are required to edit app settings.

​
Accessing app settings

To access an app’s settings:
  1. In an app, click Edit to enter draft mode.
  2. Near the top left corner of the page, click the icon (located next to Code).

​
Allow clipboard copy

Grants the app’s iframe the clipboard-write permission. This allows apps to include copy buttons that programmatically write text or values to the user’s clipboard. Along with enabling this setting yourself, the Omni Agent can enable it automatically when you ask it to add a copy button or clipboard functionality to your app.
When an app with Allow clipboard copy enabled is itself embedded inside another product, the embedding iframe must also include allow="clipboard-write" for the grant to apply to the app. See Allow copying in embed iframes for more information.

​
Allow map providers

Allows maps in your app to render tiles from keyless map providers. Along with enabling this setting yourself, the Omni Agent can enable it automatically when you ask it to add a map to your app. When enabled, Omni widens the CSP to permit image and network requests to the following map providers’ tile servers and the CDNs their libraries load from. No additional setup is needed.

​
Safe domains

Optionally extends the app’s security model by specifying additional trusted hosts for loading images, scripts, stylesheets, fonts, and network connections. By default, apps can load resources from a curated list of trusted CDNs (e.g., Google Fonts, jsDelivr) and Omni’s bundled charting, styling, and utility libraries. These are available regardless of your safe domain configuration.
Your organization’s external source policy sets the ceiling for this setting.

​
Configuring Safe domains

To configure safe domains for an app:
  1. Open the app’s settings.
  2. In the Safe domains section, toggle Allow safe domains on.
  3. Enter one or more domains in the Safe domains field. Add one domain per line or separate using spaces or commas:
    See Domain formats for formatting requirements.
  4. Click outside the text area to save. The domains are validated when you save.
Along with configuring safe domains yourself, the Omni Agent can configure safe domains when building or editing an app. For example, you can tell it “load images from cdn.example.com” and it will enable Allow safe domains and add the specified domain.

​
Disabling Allow safe domains

If you disable Allow safe domains, all external access (excluding map providers if Allow map providers is enabled) for the app will be disabled. Specified domains will be saved and can be re-enabled by toggling the setting back to on.

​
Domain formats

Safe domains accepts the following formats:Each domain must:
  • Have at least two labels (e.g., example.com is valid, but localhost or com alone is not)
  • Use only lowercase letters, digits, hyphens, dots, and optionally a leading *. wildcard
  • Be 253 characters or fewer
  • Include a valid port (5 digits or fewer, numeric) if a port is specified
For example:
Valid domains
Controls if and where an app can open links, covering both external websites and pages inside Omni. Along with enabling these settings yourself, the Omni Agent can enable these settings automatically when you ask it to add links or navigation to your app. Allows the app to open external links. When enabled, you can also configure the Open external links in a new tab and Allow navigation domains settings. When this setting is enabled but navigation domains aren’t configured, the app can open links to - and send data to - any site. Restrict where it can navigate by turning on Allow navigation domains and listing trusted hosts. Forces external links to open in a new tab, keeping the app on the current page. This is the default. The Allow opening links setting must be enabled to configure this setting.

​
Allow navigation domains

Limits where the app can open links:
  • When disabled, the app can open links to any site
  • When enabled, the app can only open links to the hosts listed in the Navigation domains field. The Allow opening links setting must be enabled to specify Navigation domains.
To restrict where an app can open links:
  1. Open the app’s settings.
  2. Enable Allow opening links.
  3. Enable Allow navigation domains.
  4. In the Navigation domains field, enter one or more hosts. Add one host per line, or separate them with commas or spaces. Wildcards like *.example.com are allowed:
    Navigation domains follow the same formatting and validation rules as safe domains. See Domain formats for accepted and disallowed patterns.
  5. Click outside the text area to save.

​
Allow internal navigation

Allows the app to navigate to other pages inside Omni — for example, a link that opens a dashboard. This setting is independent of Allow opening links: you can allow internal navigation without allowing the app to open external links, and vice versa.