limit urls that can be checked to a safer subset