A space- and/or newline-separated list of domains to allow requests from. (Example: apache.org jenkins-ci.org) If the HTTP Referer header specifies a URL with a hostname matching one of these domains, or ending in it (e.g. ci.jenkins-ci.org), the request will be allowed.