This MR adds an allow list to the API. Only URLs matching the allow list will be validated.
⚠ Depends on !1 (merged)
Closes #1 (closed)