Installation sandbox

Add the no-upscope class to any element. Masked content never reaches the agent — and never passes through UserView's servers at all.

<div class="no-upscope">
  <input value="4242 4242 4242 4242" />
</div>

Prefer to keep it out of your markup? List CSS selectors in maskedElements at init, or in the dashboard under Settings » Co-browsing.

Masking hides an element; this blocks interaction with one. Add the attribute to anything the agent shouldn't be able to click — no init config needed.

<button data-upscope-no-remote-control="true">
  Delete account
</button>

Need it conditional — only on certain pages, or only for some elements? Pass allowRemoteMiddleware at init and return false for the ones to block.

Upscope('init', {
  allowRemoteMiddleware: element => {
    if (
      window.location.pathname === '/checkout' &&
      element.closest('#pay')
    ) return false;
    return true; // fall back to default behavior
  },
});

Either way the visitor can still click it themselves — only the agent is blocked. Try the two cards in the preview: "Add a seat" is controllable, "Delete account" isn't.