Hi all 👋
We load our app in an iframe inside HubSpot and, for security reasons, we’ve limited which parent URLs we allow (using X-Frame-Options / frame-ancestors CSP).
We currently allow:
Is there an official or complete list of HubSpot iframe parent domains we should account for? Want to ensure full coverage across regions.
Thanks in advance!