added Security.allowInsecureDomain