We’ve introduced a new security requirement for Labs Forms which requires that the domains (e.g. https://www.act-on.com) of any external pages where your Form is embedded be declared. This will be a required step for all Labs Forms going forward, including those that are already in use. Forms submitted from external pages with undefined domains will fail to redirect the submitter or convert them to a Known visitor in Act-On once the security measure is put in place on November 16th, 2017.
This measure is being introduced to make Form submissions more secure. By defining which domains a Form is intended to work with, we can prevent submissions from illegitimate sources that could corrupt or pollute your data.
To determine which version of forms you are using, navigate to Content > Forms and you will notice either a Classic or Labs icon next to your form.
If you have a Labs icon, continue below. If you see the Classic icon next to your form, no further action is required.
If you are using a Labs Form with any page outside of Act-On, add their domain names to ensure continued functionality.
To avoid any malfunctions with externally embedded Forms currently in use, add the domain names of the external pages to the External Domains section of the Embed tab. Act-On will populate this list to the greatest extent possible using submission data. However, this data is being collected over a limited period of time (October 12 to November 16) and may be incomplete.
Once domain validation is put in place on November 16th, Forms embedded in external pages with undeclared domains will no longer render on those pages. Instead, visitors will see the following error message.
To resolve this error, simply add the domain of that page to the "External Domains" section of the Form and save your changes. The configuration change will be applied automatically and your Form will be displayed.
To ensure that your externally embedded Forms function properly, please add the domain names of each page in which your Form is embedded by following the steps below. Going forward, you will be unable to access a Form’s embed code until at least one domain has been added.
- Navigate to the Embed tab of your Labs Form.
- Open the External Domains slideout and add the domains of all external pages where your Form will be embedded to the provided input fields.
- Once you’ve added all domains, open the Embed Code slideout to access your Default Embed Code, which can now be used on any page associated with the listed domains.
- When embedding your Form in additional domains be sure to add those to the External Domains list. No need to do so when adding a Form to new pages of a domain that you’ve previously listed.