another list of blacklisted domains added
inject script code into tab only when scheme starts with http