href whitelisting