TRUSTEDDOMAINS (System Variable)

Specifies the domain names or URLs from which AutoCAD can run JavaScript code.

Type:	String
Saved in:	Registry
Initial value:	Varies

Note: This system variable is primarily for use by Autodesk and 3rd party developers. Only AutoCAD Javascript API calls are tracked—all other Javascript calls are not tracked.

To minimize the possibility of loading and executing malicious code, always set the TRUSTEDDOMAINS system variable to unique Internet domain names or URLs for use by the AutoCAD JavaScript API, and HTML files that might contain AutoCAD Javascript API calls. When TRUSTEDDOMAINS is set to "" (an empty string) or "." (a period), there are no trusted domains or URLs.

Any web page specified in TRUSTEDPATHS is always implicitly trusted.

Here are some examples of trusted domains that include wildcard characters:

*.autodesk.com/*                // trust anything from Autodesk
*.autocada360.com/*               // trust anything from AutoCAD A360
*.codeplex.com/site/MyProject/* // trust anything from a specified subdomain
https://144.111.123.123/*       // trust only the https protocol from a specified IP address

Note: The TRUSTEDDOMAINS system variable works in conjunction with the SECURELOAD system variable.