This article describes URLs for which permission is required to use mfloow.
Updated December 27, 2023
If your organization has implemented a security system, the following is a list of domains that require access permissions for utilizing mfloow.
Access Permissions for mfloow Domains
To enable access to the mfloow platform, it is essential to allow the use of the following URLs.
| Domain | Purpose | Impact |
| mfloow.com | For system utilization | |
| *.mfloow.com | For system access and functionality | |
| *.googleapis.com | ・For user authentication and the use of Google Fonts ・User authentication utilizes Google's Identity Platform, a robust authentication service designed to enhance security and streamline access. |
This is essential for the proper functioning of mfloow. |
| *.s3.ap-northeast-1.amazonaws.com | ・For the storage and management of images and files ・Utilizing a storage service called Amazon S3 |
This impacts the functionality for uploading and accessing images and files, such as member profile pictures and attachments for tasks. |
| fonts.gstatic.com | ・For utilizing Google Fonts | Potential impact on design: There is a possibility that the fonts expected in the mfloow application may not be displayed correctly. |
Support Page, Contact Us, and Chat Support
mfloow utilizes HubSpot to provide its support services. To ensure access to the help page, contact options, and chat support, it is necessary to allow the use of the following URLs.
| Domain | Directive | Tool |
| *.hsadspixel.net | script-src | Advertising |
| *.hs-analytics.net | script-src | Analytics |
| *.hubapi.com | connect-src | API calls for HubDB and form submissions |
| js.hscta.net | script-src、img-src、connect-src | Call-to-Action (Button) |
| no-cache.HubSpot.com | img-src | Call-to-Action (Button) |
| *.hubspot.com | script-src、img-src、connect-src、frame-src | Call-to-Action (pop-ups) and chat flows |
| *.hs-sites.com | frame-src | Call-to-Action (Pop-up) |
| static.hsappstatic.net | script-src | Content (Sprocket menus, video embedding) |
| *.usemessages.com | script-src | Communication and chat flows |
| *.hs-banner.com | script-src、connect-src | Cookie Consent Banner |
| *.hubspotusercontent##.net（##は00、10、20、30、40のいずれか） | script-src、img-src、style-src | Files |
| *.hubspot.net | script-src、img-src、frame-src | Files |
| play.hubspotvideo.com | frame-src | Files (videos) |
| cdn2.hubspot.net | img-src、style-src | Files, stylesheets |
| HubSpotに接続されているお客さまのドメイン | frame-src、style-src、script-src | Files, stylesheets |
| *.hscollectedforms.net | script-src、connect-src | Forms (non-HubSpot forms) |
| *.hsleadflows.net | script-src | Forms (Pop-up) |
| *.hsforms.net | script-src、img-src、frame-src | Forms and surveys |
| *.hsforms.com | script-src、img-src、frame-src、connect-src、child-src | Forms and surveys |
| *.hs-scripts.com | script-src | HubSpot tracking code |
| *.hubspotfeedback.com | script-src | Survey |
| feedback.hubapi.com | script-src | Survey |