Fixed default allowed domains