All Collections
Support and Troubleshooting
Setting up your website for live-review
Setting up your website for live-review

Learn how to set up your website to make sure it can be reviewed in Filestage

Updated this week

Filestage allows you to review any live website. Your reviewers can interact with your content just like they can in their browsers. Then they can switch to comment mode to add feedback and annotations.

Your reviewers can give feedback on live websites in Google Chrome, Mozilla Firefox, or Microsoft Edge. When they add a comment for the first time, they'll be asked to download a browser extension for reviewing live websites.


  • In order to annotate in the comments, users need to install a browser extension. Users can leave general comments even without installing extensions.

  • As of now, the browser extension is available for Google Chrome, Mozilla Firefox, and Microsoft Edge.

Four steps to make sure your website is ready to review in Filestage

  1. Make everything HTTPS. Make sure all your web content is served over HTTPS. Check through all the URLs inside your site and make sure references to CSS and images are all HTTPS. HTTPS is the best practice because the secure connection allows clients to exchange sensitive data with a server safely.

  2. Setup X-Frame-Options. Either of the following options is needed to allow Filestage to embed your site inside our app. You can ask your web developer to do this if you don’t know how. Once the proof is approved, any changes to the header that were made can be reverted.

    • Completely remove the X-Frame-Options from the website.

    • Allow * in your X-Frame-Options and CORS controls – especially access to any resources like images and fonts you may have hosted on your own servers. This allows Filestage to embed your site inside our app.

  3. Allow resource access. If you have resources with access restrictions (API, SDK, image servers) add * to the allowed lists.

  4. Prevent cookie consent from being displayed multiple times. If your website needs to ask for cookie consent, you should update your server's Set-Cookie header and set the SameSite attribute to None. This will allow cookie consent to be saved so that the popup does not appear repeatedly. You can find more details here.

💡 What's next? Once you're done with the above checklist, your website can be reviewed and approved easily. See how to review live websites: Review live websites

Let us know if you have any questions by reaching out to us on chat or emailing us at We're always happy to help!

Did this answer your question?