Define an allowed list of domains that are authorized to access the device's hardware APIs via JavaScript.