If you use a CDN acceleration domain name to access resources, factors such as CDN cache may affect the stability of hotlink protection in COS. In this case, you are advised to log in to the CDN console to configure hotlink protection. For detailed directions, please see Hotlink Protection Configuration.
When setting hotlink protection, you can choose to allow empty referer, so that the file can be accessed by opening its URL in a browser even if an allowlist is configured.
a.comto access the
testbucket via an allowlist, but the web player for
a.comcannot play videos stored in the
When you play videos on websites using players such as Windows Media Player or Flash Player, if the request referer is empty, the allowlist will not be hit. Therefore, you can allow empty referer when configuring the allowlist.
You can enable hotlink protection for your bucket and configure a blocklist/allowlist to limit visit sources. Currently, domain names, IPs, wildcard addresses, and more are supported. For more information, please see Setting Hotlink Protection.
- If a CDN acceleration domain name is used for accessing, CDN hotlink protection rules will be executed before COS ones.
- If a signature is carried in the access URL or headers, hotlink protection−based verification will not be performed.
This error message indicates that your access is denied by the hotlink protection rules set for your bucket. You can check whether your access complies with the hotlink protection rule. If you access with a browser, empty referer should be allowed. Otherwise, accessing via a browser directly will not be available.
You can use the hotlink protection feature to configure an IP allowlist. In this case, IPs not included in the allowlist cannot access your COS resources. For detailed directions, please see Setting Hotlink Protection.