whitelist stadium urls