Fixed allowed urls