Tableau Server Safe List / Whitelisting

If you are using Apps for Tableau Extensions on Tableau Server, you need to configure a Safe List (also called a Whitelist) to allow the extensions to work properly. This guide explains how to do that.

Why is Whitelisting Required?

CommentShare feedback on the editorTableau Server has a built-in security setting that blocks extensions unless their URLs are explicitly added to the Safe List.

In the Safe List section, add the extension URLs you want to allow.

Option A: Whitelist the Exact URL

Example: https://tableau-wb.test.us/extension/

Option B: Use Wildcard Whitelisting

To allow all subpaths of a domain, use: https://tableau-wb.test.us/.*

Wildcard whitelisting is recommended to avoid errors due to trailing slashes or subpaths.

Common Error Message Example

The WriteBackExtreme extension (URL: https://tableau-wb.test.us/extension/) is not on the safe list for this site.

This means you need to whitelist this exact URL or use a wildcard.

Video Tutorial: How to Whitelist Extension URLs on Tableau Server / Tableau Cloud

Watch our step-by-step video guide to learn how to whitelist extension URLs and set permissions on Tableau Server or Tableau Cloud.

---

Important Notes

• Always include trailing slashes / if using the exact URL.

• Wildcards simplify configuration and prevent common errors.

• After making changes, save your settings and restart Tableau Server services if needed.

---