Whitelist Enforcement blocks all external requests in student programs by default.

Whitelist Settings gives teachers control over what external content students can access or embed while working on programs in CodeHS — and are a key tool for meeting your CIPA obligations (CodeHS CIPA Compliance Statement).

CodeHS blocks known proxy and game sites by default, but no blocklist is ever fully exhaustive and new workarounds appear constantly. Whitelist enforcement gives your district a more airtight layer of control: rather than trying to anticipate every site to block, teachers have the option to define exactly what's allowed.

Teachers can manage their own approved domain lists for their Courses and Sections, putting the responsibility for appropriate access in the hands of the people who know their curriculum. Your district retains the ability to enforce whitelisting across the board, and these settings will not override your network configuration.

When your district enables Whitelist Enforcement on CodeHS, all external requests made from student programs are blocked by default. Teachers can then add approved domains at the course or section level so students can still access legitimate resources without opening up the broader web.

Your district can enable this setting to force a whitelist mode across all teachers and Sections district-wide — teachers cannot turn it off. This setting ensures your CIPA controls are consistent regardless of individual teacher settings.

Whitelists can be applied at two levels in the Whitelist Settings:

Course-level and Section-level whitelists compound into a single list. A domain approved at the Course level is automatically permitted across all its Sections, and teachers can add domains to specific Sections on top of the Course list.