public IList<Uri> TrustedCrossSiteDomains {get;}

services.AddMemoryCache();
            
services.AddFireWall("Token", "Domain Key"
     , domainName: new Uri("https://www.test.dll", UriKind.Absolute), options =>
    {
        options.JoinCustomerImprovementProgramWithEmail = "mail@test.dll";
        options.Cypher.ApplicationPassword = "123456Seven";
        options.ApplicationName = "www.test.dll";
        options.ApplicationTag = "WS3";
            
        options.UseSession = false;
        options.Cashing.GeoLocation.SlidingExpiration = TimeSpan.FromMinutes(20);
            
        options.WebServices.IsUserApiUrl = new Uri(Links.IsUserEndpoint, UriKind.Relative);
        options.WebServices.RegisterLinksApiUrl = new Uri(Links.SiteMapEndPoint, UriKind.Relative);
        options.WebServices.BeaconApiUrl = new Uri(Links.BeaconPoint, UriKind.Relative);
        options.WebServices.CSPReportUrl = new Uri(Links.CSPViolation, UriKind.Relative);
            
        options.OnEndpointsCreated+= Options_OnEndpointsCreated;
        options.OnFireWallCreated += Options_OnFireWallCreated;
        options.Rules.AllowWhiteListing = false;
        options.Rules.PhysicalFileWallExcludeReasons = Walter.BOM.FirewallBlockReasons.ALL & ~Walter.BOM.FirewallBlockReasons.NoAccessFromRegion;
        options.Rules.BlockRequest.BlockDuration.SlideExpiration = true;
        options.Rules.BlockRequest.BlockDuration.Expires = TimeSpan.FromSeconds(10);
        options.Rules.TrustedCrossSiteDomains.AddRange(new[] { new Uri("https://gateway.test.dll", UriKind.Absolute), new Uri("https://support.test.dll", UriKind.Absolute) });
        options.Rules.AllowWhiteListing = false;
        options.Rules.Headers.AddDefaultSecurePolicy()
                             .AddStrictTransportSecurityNoCache()
                             .AddXssProtectionBlockAndReport()
                             .AddContentSecurityPolicyButTrust(trustingSites: Walter.Web.FireWall.TrustingSites.Jquery | Walter.Web.FireWall.TrustingSites.Google
                                       , allowInline: true
                                       , framesPolicy: Walter.Web.FireWall.FramesPolicy.Self);
            
            
    });

[HttpGet]
[CrossSite()]
public JsonResult UserProfile()
{
...
}