removed whitelist from config file to allow loading of external scripts