For the vast majority of CodeHS courses and tools, the only domains you need to whitelist are:

*.codehs.com (codehs.com and all subdomains)
*.codehs.me (codehs.me and all subdomains)

*.intercom.io - in-site messenger to reach the CodeHS team for support

scalinghub.codehs.com

https://cdn.jsdelivr.net

You can also whitelist our Google Workspace Domain to allow students to open Drive files from the CodeHS Drive. CodeHS Google Workspace Domain: codehs.com

youtube.com - all CodeHS lesson videos can be streamed from either CodeHS or YouTube, but YouTube provides subtitles, and some lessons include non-CodeHS videos from YouTube.
​aframe.io - Virtual Reality library for building VR worlds in the sandbox.

https://cdn.assets.scratch.mit.edu/ - Scratch sprite library.

Some of the CodeHS courses pull in resources such as images, videos, and articles from other domains. Most schools we work with have not had issues with these domains, but if you are running into issues, the following is a comprehensive list of external domains used in CodeHS courses:​

*. wikipedia.org
*.cloudfront.net
​cl.ly
​projects.fivethirtyeight.com
​goo.gl
​www.google.com
​wwwnc.cdc.gov
​www.gapminder.org
​www.betterbuys.com

rackcdn.com (also used in Arkansas Programming I)

*. wikipedia.org
*.cloudfront.net
​cl.ly
​goo.gl
​i.imgur.com
​www.computer.org
​sketch.io
​www.w3.org

*. wikipedia.org
*.cloudfront.net
​cl.ly
​goo.gl
​i.imgur.com
​www.computer.org
​sketch.io
​www.w3.org

Check out this document for a full list of domains to allow for our latest Fundamentals of Cybersecurity course.

If you're using a previous version of this course, the following domains will need to be allowed:

​www.huffingtonpost.com
​www.google.com
​www.anf.es
​passwordsgenerator.net

https://cachedview.com/
​s3-us-west-2.amazonaws.com
​creativecommons.org
​threatmap.checkpoint.com
​onlinedegrees.sandiego.edu
​abcnews.go.com
​www.google.de
​hack-yourself-first.com
​xss-game.appspot.com
​blog.vrypan.net
​www.comparitech.com
​nakedsecurity.sophos.com

*. wikipedia.org
*.cloudfront.net
​cl.ly
​goo.gl
​i.imgur.com
​www.computer.org
​sketch.io
​www.w3.org

https://html5.gamedistribution.com/a55c9cc9c21e4fc683c8c6857f3d0c75/

https://openprocessing.org/sketch/1866771

https://openprocessing.org/sketch/1725088

https://game.thegamebox.ca/red_remover/

https://p5play.org/learn/

https://youtu.be/-avspZlbOWU?t=14

https://character.ai

https://experiments.withgoogle.com/thing-translator

https://suno.com/

https://aidungeon.com/

https://teachablemachine.withgoogle.com/train/image

https://chatgpt.com/

https://gemini.google.com/

https://copilot.microsoft.com/

https://teachablemachine.withgoogle.com/

https://chatgpt.com/

https://gemini.google.com/

https://experiments.withgoogle.com/thing-translator

https://suno.com/

https://gandalf.lakera.ai/

https://hourone.ai/

https://www.synthesia.io/

https://portal.vision.cognitive.azure.com/demo/image-captioning

https://www.loudly.com/

https://soundraw.io/?gad_source=1

*.client-api.unity3dusercontent.com

​aframe.io
​cdn.rawgit.com
​medicalfuturist.com
​www.raconteur.net
​commons.wikimedia.org
​c1.staticflickr.com
​www.flickr.com

​www.w3schools.com
​maxcdn.bootstrapcdn.com
*.getbootstrap.com
​ajax.googleapis.com
​www.publicdomainpictures.net
​pixabay.com
​creativecommons.org
*.wikipedia.org
*. wikimedia.org
*.cloudfront.net
​cl.ly
​www.google.com
​whichbrowser.net
​s3.amazonaws.com
​medium.com
​animals.nationalgeographic.com
​visual.ly
​onenyc.cityofnewyork.us
​1stwebdesigner.com
​designshack.net
​www.sfarts.org
​www.washington.edu
​www.walmart.com
​www.bbc.com
​www.betatakaki.com
​www.sessions.edu
​www.usatoday.com
​www.betterbuys.com
​science.howstuffworks.com
​placekitten.com
​glyphicons.com
​t.co

*. wikipedia.org
*.cloudfront.net
​cl.ly
​goo.gl
​i.imgur.com
​www.computer.org
​sketch.io
​www.w3.org