add whitelist loading in oembed api