fix: angular resourceUrlWhitelist