whitelisted dashes for urls