How online video domain whitelist/blacklist work?

At many video providers (vimeo plus /iframe embed) you can whitelist/blacklist domains where videos are allowed to play. How does it work?