Widen where the navigator may travel. By default it stays on the start URL’s own origin — the same scheme, host, and port. Each --navigator-allow-url adds a URL glob the navigator may also visit; repeat the flag to add more.

zshot --navigate "find the API docs" \
  --navigator-allow-url "https://*.example.com/*" \
  --navigator-allow-url "https://api.partner.com/v1/*" \
  https://example.com -t png -f out.png

A glob’s * spans path separators, so https://example.com/* matches any path on that origin. Default ports are implicit: write https://example.com/*, not :443; spell out non-default ports (http://127.0.0.1:8080/*). Use * to allow any URL.

Links and forms whose target the allowlist rejects are hidden from the navigator and blocked at navigation. Over the HTTP server, request this as the navigator_allow_url array.

This is a Pro-tier flag.