DFINITY Foundation

Synapse.vote (original)

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8yeargangDAO

Isaac Valadez

Krzysztof Żelazko

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Synapse.vote (NEW)

Taggr Network

CodeGov.org

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Internet Computer Association

Arthur’s Neuron (used to be cycle_dao)

Inactive (Request Removal) - The Fools' Court

$STACK

Always Rejects

John Wiegley

The list of allowed domains was created to help prevent malicious URLs from appearing in proposals, as these could potentially target NNS users who are logged in through the NNS Dapp. Currently, any URL can still be added to the summary field in markdown, so this particular mitigation does not significantly enhance security. It is worth emphasizing that the whitelist still does not provide 100% security, but it makes submitting and verifying proposals much more problematic. This is often due to the inability to attach the most important data needed to consider the proposal in the designated place, because the domain is not approved - it's time to change it. As a solution, I propose to allow submission of governance proposals that could register domain to the URL whitelist. Other solutions could also be very useful and presented to the community by the DFINITY Foundation or other ICP developers.

We need to discuss and develop alternative approaches beyond limiting ourselves to the \[DFINITY Forum\](https://forum.dfinity.org) domain to ensure security. Currently (in my opinion), this creates an extremely frustrating and restrictive user experience. If we are serious about decentralizing the ICP ecosystem, the \[DFINITY Foundation\](https://dfinity.org) cannot be the only forum provider for discussing about proposals.

When submitting yesterday's proposal with a different URL, I received an \`error_message: "Proposal URL was not in the list of allowed domains: \[\\"forum.dfinity.org\\"\]"\`. Then I just deleted it. The URL field can be set as an empty string, but sometimes this makes it difficult for the community to validate the authenticity of the proposal. For some voters, providing a link to the proposal is such an important factor that if it is not provided by the author, they are more likely to simply reject it rather than dig deeper and do some own research.

Allow to expand the list of allowed domains for the proposal URL