allow multiple whiltelisted domains