allowDomain and allowInsecureDomain