mandates whitelisting of web links