Revise access origin whitelist