Allow redirects from the confirmation page
Only allow connections to specific hosts