Limit allowed src