swapped urls, white listing rather than black listing