whitelist works randomly. Links with the SAME header, like https://www.google.com/url?sa=* works 50% of the time...