Removed .* from whitelist_url, use explicit domain list now.