preview work.  fix same-origin policy issue (have filehandle servlet act as a http proxy). fix code extension check