Embed block: masking the url within the iframe code injection

Hi there, I have built a few dashboards which I have hosted on heroku, e.g. https://reviews-montage.herokuapp.com/

On my site https://www.analyticsbymark.co.uk/ I have a free member section which I want to provide access to some of the dashboards I have created. I will also create a paid member section with access to others.

The apps embed great into the site using an embed block with a code injection of:

<iframe src="https://reviews-montage.herokuapp.com/" width=100% height=2500
  frameborder='0'  scrolling='no' seamless='seamless'>

(it doesn't seem to work if i just enter the URL into the embed block)

The issue is that if I then inspect the page once rendered I can see the underlying url for the app hosted on heroku. It's not the end of the world but essentially as it is now someone could pay for membership, get the url, cancel membership and go around my site and straight to the underlying app.

Is there a way you can save an url in say an environment within squarespace and reference that in the code injection or something?

Thanks in advance for any help

Mark

38 minutes ago, analyticsbymark said:

Is there a way you can save an url in say an environment within squarespace and reference that in the code injection or something?

No. Squarespace is a serverless platform so you don't have access to a "backend" where you can store this information.

39 minutes ago, paul2009 said:

No. Squarespace is a serverless platform so you don't have access to a "backend" where you can store this information.

Gotcha, thanks for the clarity. Is there any other way it might be possible to mask the url or is it simply not possible?