Add Your Own Scripts, Checked Before They Go Live
You can now add custom JavaScript to your actor website. Unlike custom CSS, it does not go live immediately. It is reviewed first, usually within a working day.
Why a review step
Because a stylesheet can make your site ugly and a script can do considerably more than that. It can read what visitors type, load code from somewhere else that changes after we have looked at it, and pass data off your page to a third party. A visitor to your site has no way of knowing any of that is happening.
Most custom scripts are completely benign. Almost all of them are a snippet somebody was given by a service they signed up to. The problem is that "a snippet somebody was given" is also exactly what a compromised script looks like, and the person pasting it in cannot tell the difference.
What the review checks
- Whether it loads code from an external source, and whether that source is one we recognize.
- Whether it reads form fields, and what it does with what it reads.
- Whether it sends anything off the page, and where to.
- Whether it will slow the site down or block rendering.
Approved scripts run on your site normally. Rejected ones come back with a reason, not a refusal.
What is approved without a wait
Common integrations are pre-approved and switch on instantly: mainstream analytics, the newsletter platforms in the newsletter integrations, standard booking and scheduling widgets. If what you need is on that list, there is nothing to review.
Analytics specifically is a setting rather than a script, covered in analytics: Google and Clicky. Use the setting rather than pasting the snippet.
What is not permitted at all
Anything that collects payment details on the page, anything that obscures where it is sending data, and anything obfuscated. If we cannot read it, we cannot approve it, and "it is minified" is not an exception because the original is always available.
The honest framing
This is a restriction. It is a restriction that exists because your visitors include casting directors and agents, and a script on your site is a script running on their machine. That is a responsibility that comes with having a website at all, and most people would rather it was checked than not.
Create a free actor website and see whether you need a script at all.
