file:// uri whitelisted