ShapeDiver whitelist issue with Google Sites

Grasshopper ShapeDiver
1

Hello guys and ShapeDiver team,
my shapediver user is Armandof_90, this is my first time here. :handshake:

I’m trying to embed a viewer into a website published using Google Sites, but I’m encountering a technical limitation that prevents it from working reliably.
I’ve seen in other threads that adding the domain sites.google.com to the whitelist should make the embed work, but in my case that domain has never worked.
What did work in the past was adding www.gstatic.com to the whitelist. This allowed the viewer to load correctly inside Google Sites for a while. However, this method no longer works either, likely due to changes in how Google serves published sites.

Currently, published Google Sites pages seem to be delivered from dynamic subdomains such as:
https://1504077899-atari-embeds.googleusercontent.com

The issue is that each time I publish or update the site, the subdomain changes, which triggers the following error:

Embedding not allowed for https://[new-number]-atari-embeds.googleusercontent.com

I’ve tried adding the exact subdomain (e.g., 1504077899-atari-embeds.googleusercontent.com) to the whitelist, and it works… until I publish the site again, and the viewer breaks due to the new domain.
I’ve also tried adding broader domains like googleusercontent.com or atari-embeds.googleusercontent.com, with and without wildcards (e.g., *.googleusercontent.com), but as far as I understand, the platform currently does not support wildcards at the beginning of the domain.
To try to stabilize the setup, I even purchased a custom domain and connected it properly to the Google Site, but not even whitelisting that custom domain has allowed the viewer to work reliably.

I’m relatively new to both ShapeDiver and Google Sites — so it’s very possible I’m overlooking a better approach. I’d really appreciate any advice or suggestions, especially something more stable than updating the whitelist manually every time.

My question is:
Is there any official or supported way to enable stable embedding from Google Sites, without having to manually update the whitelist every time the site is published?

Is there a way to dynamically allow these changing subdomains, or is wildcard or pattern-based whitelisting something you plan to support in the future?

Thank you for your time :folded_hands: . I’m working exclusively within the Google Sites ecosystem and would greatly appreciate any technical guidance to avoid switching platforms.

model name: v0.2.2.2E con appbuilding
current link to my web Wekaná studio - Maker mobili (made with sites.google.com)

Best regards,
Jesus

2

We have added the possibility to list *.googleusercontent.com as a domain. Please try and let me know if it fixes your issue.

3

Thank you so much Mathieu

adding *.googleusercontent.com to the whitelist did work perfectly for embedding using the iframe code. I really appreciate the quick fix!

However, there’s still one issue, embedding using the ShapeDiver app link (the one I previously had working on) still doesn’t work inside Google Sites. Previously, I was able to embed the app URL directly and have it display correctly, but now it gets blocked. The iframe code works, but embedding the link alone (without custom iframe markup) no longer does.

Is there anything else I need to adjust to make the app URL embedding work again?

Thanks again for your support!

4

What do you mean by “embedding using the ShapeDiver app link”? Please provide details on the way you are trying to embed the App into your website? And explain why using the iframe code is not an option for you?

5

Sure! What I meant is that I previously had the following app embedded in my site using the direct app link (not the iframe code).

App link
App link656×450 25.8 KB

This allowed me to display the full ShapeDiver app interface, which is much simpler and more user-friendly for my visitors.
Using the app link made the experience cleaner, especially for non-technical users, and I’d really like to keep embedding it that way if possible.

This is how the app looked when it was embedded in the site.
This is how the app looked when it was embedded in the site.1911×1015 171 KB

Let me know if there’s any way to enable this again with the current domain setup. Thanks again!

6

Please explain what you mean by “I previously had the following app embedded in my site using the direct app link”. Do you mean that you just copied the URL of the app (i.e www.shapediver.com/app/builder/v1/…) and it rendered as an iframe in your website, without having to copy a full iframe code? If this used to work, this was due to a bug on our side, which we have now fixed. If you want to embed an App in your website, please follow the instructions on this page: https://help.shapediver.com/doc/embed-apps-in-external-websites

7

Ah, I see. Yes, I was using the app´s link directly. I just copied the app URL into the Google Sites editor, which allows embedding content via URL, and it worked that way for about a month.

I’ll review the documentation you shared, and once I manage to embed the app properly into my site using the recommended method, I’ll share the results here.

Thanks again!

8

I tried following the documentation, specifically option number 3, but I keep getting the message “ID not found.” I tested this with several models from my account. At first I thought it might be because the models were private, but I also tried with one of my public models and got the same message.

image
image1200×750 19.3 KB

All of the models I tested have “Allow embedding” and “Link sharing” enabled (for the private ones), so I believe the permissions are set correctly.

I know you mentioned that the reason I was previously able to embed the app using just the direct link was due to a bug that has now been fixed. However, for me that approach was really practical and simple, especially within Google Sites.
Is there any chance that functionality could be reconsidered or made available again in some form? It made the integration process much smoother, especially for users who don’t need advanced custom embedding.

Thanks again for your support!

9

I just tested and everything seems to work on my side. Could you please post exactly the iframe code you are using to embed your model?

The old method you were using does not work anymore because it was resulting from a security issue. We will not enable it again. However, we will soon add a way to copy and paste the iframe code for Apps directly from the platform, which will be as convenient as copying the url.

10

Oh, I see! I’ll be looking forward to that new feature, it definitely sounds like a great solution.

In the meantime, getting back to the issue, here is the iframe code I used. I took it directly from the documentation you shared with me earlier:

iframe width=“100%” height=“480” src=“ShapeDiver App Builder” referrerpolicy=“origin” allowfullscreen style=“overflow: hidden; border-width: 0;”
p>Your browser does not support iframes.</p
/iframe"

image
image708×380 24.3 KB

According to the documentation, I replaced MODEL_SLUG with the slug from my model. I tried it with several models from my account. Here’s one of the slugs I tested, in case you’d like to try it on your end v0-2-3a-con-appbuilding
image

Let me know if you spot something I’m missing. Thanks again!

11

Could you please share the final link of the google site with your model embedded in it?

12

sure
this is the link but the page is hosted on google sites

13

My apologies for the misunderstanding: I just realized that you are using a legacy ShapeDiver Designer plan, which does not include App Builder embedding. You could switch to the new Starter plan or contact us to upgrade your Designer plan with the App Builder embedding feature.