Skip to main content
Version: v2

Referrer blocking

Referrer blocking restricts access to your stream based on the HTTP Referer header sent by the viewer's browser. This allows you to control which websites are allowed to embed and play your content.

When enabled, the platform checks the Referer header of each playback request against a list of allowed or blocked domains. Requests originating from unauthorized websites are rejected, preventing third parties from embedding your stream on their pages without permission.

Use cases​

  • Embed protection — ensure your stream can only be played on your own website or approved partner sites.
  • Content piracy prevention — block unauthorized websites from hotlinking your stream.
  • Partner control — allow specific resellers or affiliates to embed the stream while blocking everyone else.

Referrer blocking can be configured via the API or the dashboard on a per-distribution basis.

Referrer blocking settings

API example​

You can also configure referrer blocking via the API using the security.refererBlocking object when creating or updating a distribution.

POST https://api.theo.live/v2/channels/{channelId}/distributions

{
  "name": "my-distribution",
  "security": {
    "refererBlocking": {
      "enabled": true,
      "allowedDomains": ["example.com", "partner.com"],
      "allowNativeApps": true
    }
  }
}