Only allowed domains are accessible