slightly extended documentation

Add notes for javascript and host_whitelist