config domain whitelist