using remote angular prototype
rejecting urls not from whitelisted domains