support whitelisting of urls