whitelist bed bath & beyond and potterybarn domains