Use window.top.location.href everywhere, so that only the current site url show up when adding the site to include list. Earlier if the pages contains google captcha or embedded pages, they would hijack the add include site options with their urls. This should now prevent this.