Does it handle ancilliary domains correctly? For example if I allowlist youtube.com, but that also uses youtu.be or cdn.google.com, do resources from those domains get blocked until I specifically allow them?