added openapi site to white list