Whitelist publicly visible attributes

Safer than blacklisting the internal ones
Reword validation for clarity
Extract validation of absolute path...

... so we can re-use it elsewhere
Add rendering_app to ContentItem
WIP route registration