Add URL whitelist