Unplug whitelist

Creating for code review.
We should change this to at least be: "/app_webview/"