Profiling showed some resources under js that needed whitelisting.