Whitelists don't work when the target URL is accessed through a redirect