Added host whitelisting to the plugin.xml file.