1.实现白名单功能，设置可以允许来访问的refer.

[zhufengnodejs]

[Leconomy]

if(referHost === req.host || referHost in whitelist){
        return next();
    }