added http://api. and http://connect. to white list