I think it would make more sense to add a list of accepted hostnames, than to accept all. Check the newly merged HttpFetch helper, it contains this thing implemented (unfortunately it forces HTTP, which TikaStage does not). Perhaps this can be reused?