Add only full domains to the list (that is the hostname part of your URL, including the port number if you are using a non-standard one, i.e. everything after https://), more on this documentation page. The input box for the global domains should look like this:
Update: The JSFiddle iframes use a different URL and you need to whitelist fiddle.jshell.net.