From dcce060ef2207bc24c1de780e085347bf5d2979b Mon Sep 17 00:00:00 2001
From: "encrypt.town" <50508651+EncryptTown@users.noreply.github.com>
Date: Wed, 22 May 2019 01:14:37 -0700
Subject: [PATCH] Whitelist Server Source Domains (#829)

A malicious blacklist, or accidental block, could prevent dnscrypt-proxy users from being able to fetch public resolvers and important certificate updates. Both URLs are taken from the default config:

[sources.'public-resolvers']
urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v2/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v2/public-resolvers.md']
---
 utils/generate-domains-blacklists/domains-whitelist.txt | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/utils/generate-domains-blacklists/domains-whitelist.txt b/utils/generate-domains-blacklists/domains-whitelist.txt
index 9235451f..64a5e778 100644
--- a/utils/generate-domains-blacklists/domains-whitelist.txt
+++ b/utils/generate-domains-blacklists/domains-whitelist.txt
@@ -4,10 +4,12 @@ appsflyer.com
 azurewebsites.net
 cdnetworks.com
 cloudapp.net
+download.dnscrypt.info
 edgekey.net
 elasticbeanstalk.com
 github.com
 github.io
+raw.githubusercontent.com
 invalid
 j.mp
 l-msedge.net