I've never tried to do this, but looking in devtools it seems like web games are loaded from a CDN with the domain v6p9d9t4.ssl.hwcdn.net, so maybe try whitelisting *.hwcdn.net?
