> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.drimify.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Domain Control


# Domain Control for Embedding Your Application

Drimify allows you to control which domains can embed your application using an iframe. This feature ensures your content is only accessible from trusted sources and prevents unauthorised embedding.

## How It Works

You can define a list of permitted domains. Only these domains will be able to embed your application in an iframe. Each domain should be written on a separate line.

### Examples of Permitted Domains

| ✅ Allowed Entries | ❌ Not Allowed Entries |
| ---- |
| `example.com` | `http://example.com` (protocol not needed) |
| `*.example.com` | `www.*.example.com` (wildcard only works at the beginning) |
| `subdomain.example.com` | `subdomain.*.example.com` (invalid wildcard usage) |
## Using Wildcards

A **wildcard domain** allows you to permit all subdomains of a given domain. You can use `*.` at the beginning of a domain to allow all its subdomains.

**Example:**

* `*.example.com` → Allows `sub.example.com`, `blog.example.com`, `shop.example.com`, etc.
* `example.com` (without `*.`) → Only allows `example.com`, **not** `sub.example.com`.

### Tips for Using Wildcards

* Wildcards **must be at the beginning** of the domain (e.g., `*.example.com`, **not** `www.*.example.com`).
* Be careful when using `*.` as it will allow **all** subdomains, including dynamically created ones.
* If you need to allow multiple specific subdomains, list them individually instead of using a wildcard.

## Best Practices

✔ Only allow domains you trust.  
✔ If you need to embed on multiple subdomains, consider using a wildcard ( `*.yourdomain.com`).  
✔ Review your list periodically to ensure only authorised domains have access. 