whitelist allowed domains (bug 865624)