Trusted URLs - Revision history

Usr 6fa4abc5-9952-4a0a-97de-b3598fbf6a5c: Update from https://web.archive.org/web/20260916031713/https://api.vrchat.cloud/api/1/config

2026-09-16T05:01:18Z

Update from https://web.archive.org/web/20260916031713/https://api.vrchat.cloud/api/1/config

Usr 578aa632-439b-4c41-9266-776323ba9ad2 at 02:30, 8 March 2026

2026-03-08T02:30:21Z

← Older revision		Revision as of 02:30, 8 March 2026
Line 3:		Line 3:

	== Video player allowlist ==		== Video player allowlist ==
	The following domains are allowlisted for public ~~{{VRC link\|~~https://creators.vrchat.com/worlds/udon/video-players/www-whitelist/\|video}} content ~~use~~ in [[Special:MyLanguage/Video_players\|video players]].		The following domains are allowlisted for public [https://creators.vrchat.com/worlds/udon/video-players/www-whitelist/ video] content in [[Special:MyLanguage/Video_players\|video players]]. For the complete list used at runtime, which may change at any time, query the <code>urlList</code> property from the [[apiref:reference/get-config\|config endpoint]] of the [[Special:MyLanguage/VRChat API\|VRChat API]].
	{\| class="wikitable"		{\| class="wikitable"
	!Service		!Service
Line 32:		Line 32:
	\|<code>*.topaz.chat</code>		\|<code>*.topaz.chat</code>
	\|-		\|-
	\|Twitch~~.TV~~		\|Twitch
	\|<code>.twitch.tv</code>,<code>.ttvnw.net</code>,<code>*.twitchcdn.net</code>		\|<code>.twitch.tv</code>,<code>.ttvnw.net</code>,<code>*.twitchcdn.net</code>
	\|-		\|-
	\|VRCDN		\|[[Special:MyLanguage/Community:VRCDN\|VRCDN]]
	\|<code>.vrcdn.live</code>,<code>.vrcdn.video</code>,<code>*.vrcdn.cloud</code>		\|<code>.vrcdn.live</code>,<code>.vrcdn.video</code>,<code>*.vrcdn.cloud</code>
	\|-		\|-
Line 49:		Line 49:

	== String loading allowlist ==		== String loading allowlist ==
	The following domains are allowlisted for ~~public use with {{VRC link\|~~https://creators.vrchat.com/worlds/udon/string-loading/\|string loading}} using [[Special:MyLanguage/Udon\|Udon]].		The following domains are allowlisted for [https://creators.vrchat.com/worlds/udon/string-loading string loading] using [[Special:MyLanguage/Udon\|Udon]]. For the complete list used at runtime, which may change at any time, query the <code>stringHostUrlList</code> property from the [[apiref:reference/get-config\|config endpoint]] of the [[Special:MyLanguage/VRChat API\|VRChat API]].
	{\| class="wikitable"		{\| class="wikitable"
	!Service		!Service
Line 71:		Line 71:

	== Image loading allowlist ==		== Image loading allowlist ==
	The following domains are allowlisted for ~~public use in {{VRC link\|~~https://creators.vrchat.com/worlds/udon/image-loading/\|image loading}} using Udon.		The following domains are allowlisted for [https://creators.vrchat.com/worlds/udon/image-loading image loading] using [[Special:MyLanguage/Udon\|Udon]]. For the complete list used at runtime, which may change at any time, query the <code>imageHostUrlList</code> property from the [[apiref:reference/get-config\|config endpoint]] of the [[Special:MyLanguage/VRChat API\|VRChat API]].
	{\| class="wikitable"		{\| class="wikitable"
	!Service		!Service
Line 79:		Line 79:
	\|<code>cdn.discordapp.com</code>		\|<code>cdn.discordapp.com</code>
	\|-		\|-
	\|DisBridge		\|[[Special:MyLanguage/Community:DisBridge\|DisBridge]]
	\|<code>*.disbridge.com</code>		\|<code>*.disbridge.com</code>
	\|-		\|-
Line 106:		Line 106:
	\|<code>i.redd.it</code>		\|<code>i.redd.it</code>
	\|-		\|-
	\|Twitter		\|X (formerly Twitter)
	\|<code>pbs.twimg.com</code>		\|<code>pbs.twimg.com</code>
	\|-		\|-

Usr 8ee44c1a-f905-4e08-bb61-e1cd34e09fc0: Changed "Category:Video Players" to "Category:Video players"

2026-01-18T09:42:32Z

Changed "Category:Video Players" to "Category:Video players"

← Older revision		Revision as of 09:42, 18 January 2026
Line 120:		Line 120:
	* [[Video players]]		* [[Video players]]

	[[Category:~~Video_Players~~]]		[[Category:Video_players]]

Usr 8ee44c1a-f905-4e08-bb61-e1cd34e09fc0: Included "See also", for video players.

2024-12-07T16:04:40Z

Included "See also", for video players.

← Older revision		Revision as of 16:04, 7 December 2024
Line 115:		Line 115:
	\|<code>assets.vrchat.com</code>		\|<code>assets.vrchat.com</code>
	\|}		\|}

			== See also ==

			* [[Video players]]

	[[Category:Video_Players]]		[[Category:Video_Players]]

Usr 40be82e7-f7d5-4548-b314-3fc7b26d22ee at 11:08, 7 December 2024

2024-12-07T11:08:13Z

← Older revision		Revision as of 11:08, 7 December 2024
Line 1:		Line 1:
	{{Noticebox/Official}}		{{Noticebox/Official}}
	By default, [[Special:MyLanguage/Worlds\|worlds]] in [[Special:MyLanguage/VRChat\|VRChat]] cannot make requests to ~~remote~~ URLs unless the user enables the "[[Special:MyLanguage/Untrusted_URLs\|Allow Untrusted URLs]]" [[Special:MyLanguage/Settings\|setting]]. This is an intentional measure for security purposes. There is however an allowlist of trusted domains that are the exception to this rule, and are specific to the type of content being loaded. Below are the different allowlists by type.		By default, [[Special:MyLanguage/Worlds\|worlds]] in [[Special:MyLanguage/VRChat\|VRChat]] cannot make requests to untrusted URLs unless the user enables the "[[Special:MyLanguage/Untrusted_URLs\|Allow Untrusted URLs]]" [[Special:MyLanguage/Settings\|setting]]. Public [[Special:MyLanguage/Instances\|instances]] are additionally secured by a list of up to 10 hosts, which can be set by the world creator. This is an intentional measure for security purposes. There is however an allowlist of trusted domains that are the exception to this rule, and are specific to the type of content being loaded. Below are the different allowlists by type.

	== Video player allowlist ==		== Video player allowlist ==

Usr 8ee44c1a-f905-4e08-bb61-e1cd34e09fc0: Added to Category:Video players

2024-12-07T11:07:54Z

Added to Category:Video players

← Older revision		Revision as of 11:07, 7 December 2024
Line 115:		Line 115:
	\|<code>assets.vrchat.com</code>		\|<code>assets.vrchat.com</code>
	\|}		\|}

			[[Category:Video_Players]]

Usr 8ee44c1a-f905-4e08-bb61-e1cd34e09fc0: Tweaked capitalization, per MOS.

2024-12-07T10:59:40Z

Tweaked capitalization, per MOS.

← Older revision		Revision as of 10:59, 7 December 2024
Line 2:		Line 2:
	By default, [[Special:MyLanguage/Worlds\|worlds]] in [[Special:MyLanguage/VRChat\|VRChat]] cannot make requests to remote URLs unless the user enables the "[[Special:MyLanguage/Untrusted_URLs\|Allow Untrusted URLs]]" [[Special:MyLanguage/Settings\|setting]]. This is an intentional measure for security purposes. There is however an allowlist of trusted domains that are the exception to this rule, and are specific to the type of content being loaded. Below are the different allowlists by type.		By default, [[Special:MyLanguage/Worlds\|worlds]] in [[Special:MyLanguage/VRChat\|VRChat]] cannot make requests to remote URLs unless the user enables the "[[Special:MyLanguage/Untrusted_URLs\|Allow Untrusted URLs]]" [[Special:MyLanguage/Settings\|setting]]. This is an intentional measure for security purposes. There is however an allowlist of trusted domains that are the exception to this rule, and are specific to the type of content being loaded. Below are the different allowlists by type.

	== Video ~~Player Allowlist~~ ==		== Video player allowlist ==
	The following domains are allowlisted for public {{VRC link\|https://creators.vrchat.com/worlds/udon/video-players/www-whitelist/\|video}} content use in [[Special:MyLanguage/~~Video_Players~~\|video players]].		The following domains are allowlisted for public {{VRC link\|https://creators.vrchat.com/worlds/udon/video-players/www-whitelist/\|video}} content use in [[Special:MyLanguage/Video_players\|video players]].
	{\| class="wikitable"		{\| class="wikitable"
	!Service		!Service
Line 48:		Line 48:
	\|}		\|}

	== String ~~Loading Allowlist~~ ==		== String loading allowlist ==
	The following domains are allowlisted for public use with {{VRC link\|https://creators.vrchat.com/worlds/udon/string-loading/\|string loading}} using [[Special:MyLanguage/Udon\|Udon]].		The following domains are allowlisted for public use with {{VRC link\|https://creators.vrchat.com/worlds/udon/string-loading/\|string loading}} using [[Special:MyLanguage/Udon\|Udon]].
	{\| class="wikitable"		{\| class="wikitable"
Line 70:		Line 70:
	\|}		\|}

	== Image ~~Loading Allowlist~~ ==		== Image loading allowlist ==
	The following domains are allowlisted for public use in {{VRC link\|https://creators.vrchat.com/worlds/udon/image-loading/\|image loading}} using Udon.		The following domains are allowlisted for public use in {{VRC link\|https://creators.vrchat.com/worlds/udon/image-loading/\|image loading}} using Udon.
	{\| class="wikitable"		{\| class="wikitable"

Usr 6b189dbf-f096-47d0-afbd-136782d7014b: /* Image Loading Allowlist */

2024-12-07T10:58:33Z

Image Loading Allowlist

← Older revision		Revision as of 10:58, 7 December 2024
Line 79:		Line 79:
	\|<code>cdn.discordapp.com</code>		\|<code>cdn.discordapp.com</code>
	\|-		\|-
	\|~~<code>~~DisBridge~~</code>~~		\|DisBridge
	\|<code>*.disbridge.com</code>		\|<code>*.disbridge.com</code>
	\|-		\|-

Usr 6b189dbf-f096-47d0-afbd-136782d7014b at 10:58, 7 December 2024

2024-12-07T10:58:03Z

← Older revision		Revision as of 10:58, 7 December 2024
Line 3:		Line 3:

	== Video Player Allowlist ==		== Video Player Allowlist ==
	The following domains are allowlisted for {{VRC link\|https://creators.vrchat.com/worlds/udon/video-players/www-whitelist/\|video}} content ~~used~~ in [[Special:MyLanguage/Video_Players\|video players]].		The following domains are allowlisted for public {{VRC link\|https://creators.vrchat.com/worlds/udon/video-players/www-whitelist/\|video}} content use in [[Special:MyLanguage/Video_Players\|video players]].
	{\| class="wikitable"		{\| class="wikitable"
	!Service		!Service

Usr 6b189dbf-f096-47d0-afbd-136782d7014b: Added additional public use image domains

2024-12-07T10:57:31Z

Added additional public use image domains

← Older revision		Revision as of 10:57, 7 December 2024
Line 71:		Line 71:

	== Image Loading Allowlist ==		== Image Loading Allowlist ==
	The following domains are allowlisted for use in {{VRC link\|https://creators.vrchat.com/worlds/udon/image-loading/\|image loading}} using Udon.		The following domains are allowlisted for public use in {{VRC link\|https://creators.vrchat.com/worlds/udon/image-loading/\|image loading}} using Udon.
	{\| class="wikitable"		{\| class="wikitable"
	!Service		!Service
Line 78:		Line 78:
	\|Discord		\|Discord
	\|<code>cdn.discordapp.com</code>		\|<code>cdn.discordapp.com</code>
			\|-
			\|<code>DisBridge</code>
			\|<code>*.disbridge.com</code>
	\|-		\|-
	\|Dropbox		\|Dropbox
	\|<code>dl.dropbox.com</code>		\|<code>dl.dropbox.com</code>,<code>dl.dropboxusercontent.com</code>
	\|-		\|-
	\|GitHub		\|GitHub
Line 105:		Line 108:
	\|Twitter		\|Twitter
	\|<code>pbs.twimg.com</code>		\|<code>pbs.twimg.com</code>
			\|-
			\|VRCDN
			\|<code>*.vrcdn.cloud</code>
	\|-		\|-
	\|VRChat		\|VRChat
	\|<code>assets.vrchat.com</code>		\|<code>assets.vrchat.com</code>
	\|}		\|}