Filestack Technical Glossary
Comprehensive reference for Filestack platform architecture and services
Domain Whitelists
Security
Broader, network-level security layer that complements fine-grained policy control by restricting service access to approved domains.
Operating Modes
- Upload Whitelist: Restricts File Picker embedding by Origin header
- Delivery Whitelist: Restricts asset embedding by Referer header
Protection Against
- API key theft and unauthorized usage
- Bandwidth theft through hotlinking
- Unauthorized content distribution
Limitations
Headers can be spoofed by non-browser requests, so should be used as first line of defense alongside Security Policies.
📚 Filestack Documentation
Learn more about Domain Whitelists in the official Filestack documentation: