Whitelisted URLs with regex