- add a 'rejectExternalSources' options to reject any external requests