How to whitelist multiple domains? If I put just `localhost`, it works. But if I put like `localhost,*.run.app` It breaks on all domains.