...

Additionnal information

Domain restrictions 

It can be configured in the point of sales definition is possible to configure which domain can access the REST API through ajax calls. This prevents inserting widgets on domains that are not explicitly authorized. 

The following configuration screen is available to add domain restrictions: