create a whitelist of urls (bug 1009710)