add box.com cdn to white list