[David/Kate] Initial implementation of whitelist sandbox; allow code with warnings