add javascript,ruby shell to forbidden files #397