How to whitelist/blacklist sources and domains