You may need to whitelist Turtl in your CRM, form provider, or security software to ensure everything works properly and securely. Many platforms include built-in security measures that block data or content from unrecognized websites to protect against spam, fraud, or malicious code. By whitelisting Turtl, you're telling the platform that Turtl is a trusted place where the website’s content can be embedded, uploaded to, or that it’s safe to allow communication between the two services.
One common method these tools use to enforce security is through a Content Security Policy (CSP). A Content Security Policy (CSP) is a security tool that helps protect your website from harmful content. It also determines where its contents can be embedded, helping to prevent it from being displayed on untrusted or unauthorized websites.
This is why, in some cases, Turtl needs to be added to your third-party service's whitelist to ensure everything works smoothly.
Each third-party service has its own process for whitelisting trusted websites. It's always best to check the service's documentation for exact steps.
Some examples:
The third-party provider form doesn’t display in Turtl: The website where the form is hosted currently doesn't allow itself to be embedded on Turtl.
The linked website does not open in the lightbox: The website prevents this with its CSP. If it’s a website you manage, update the CSP; otherwise, respect their policy and use the "Open in New tab" link option instead.
Slow load times: Your company might use web proxies for security that scan all network traffic for suspicious activity. Whitelisting Turtl in your security software will improve document load times.
Unable to upload images and videos: Your company may have security restrictions in place that block image and video uploads on unauthorized domains.
Whitelisting domains
If you're experiencing any of the issues mentioned above, try whitelisting the following Turtl domains to see if that resolves the problem:
your-account-name.turtl.co or your custom domain
assets.turtl.co
user-themes.turtl.co
themes.turtl.co
*.turtl.co - Wildcard domain