Better than either of those, I think, would be allow url("your-url-here") (with reject or something similar for the opposite). You could even drop the url

Better than either of those, I think, would be allow url("your-url-here") (with reject or something similar for the opposite). You could even drop the url method and simply write allow "your-url-here" if you only need to allow/disallow based on URLs.