Securing XHR requests from Figma plugins

Plugin and Widget API Questions
1

Thanks for the great platform to build on! Would it be possible for the developers to add in some extra security for XHR requests originating from Figma plugins?

Specifically, I’d like a way to verify that XHR requests (eg. searching our API) is legit coming from a Figma plugin. Whether that’s intercepting requests and sending along headers, or else being able to pass along Figma data from the figma client side API that I can then verify via a server side requests.

Would love some guidance on this :slight_smile:

2 Likes
2

Did you figure out a solution to this Oliver? I’m working on the same problem :slightly_smiling_face:

4

I haven’t unfortunately :frowning:

5

thats frustrating. did you hear back from anyone at figma at all?

6

I haven’t unfortunately.

7

ah well. thanks anyway!

8

:slight_smile: I’ll let ya know if I find anything else.

1 Like