added a white list of authorized domains