remove legacy code
white list what js is included