The "th1-uri-regexp" setting:

Specify which URI's are allowed in HTTP requests from
TH1 scripts.  If empty, no HTTP requests are allowed
whatsoever.