Limit external domain access