A new feature is now available in the point of sales configuration screens of SecuTix, allowing the restriction of usage of Gravity Widgets to explicitly set domains. The configuration of granted domains can be done in Point of sale > Gravity, by setting one domain per line in the list. When the list is empty, then any domain can access the Widget functionnalities.
Please note that this security mechanism does not prevent the injection of Widgets in third party unauthorized web sites, but blocks any communication done via Ajax calls to the underlying REST API. Public data will still be accessible when executing explicit calls to the REST API.
