Now that I'm using MyDomain, I am noticing that sandboxes have a silly domain name associated with them (e.g.,
I'd like to whitelist production and all potential sandboxes as referrers for my Google API key, including Standard, VisualForce and Lightning subdomains.
What is a good list of domains I can use for this that will include my production org, and my sandboxes, and ideally no other production orgs?
Google's API Console does allow
*'s as wildcards, though it seems that it only works for whole components of the subdomain (
mydomain.*.salesforce.org) and doesn't work in the case of