I'd rather have a universal url whitelist for both methods.