browser whitelist in readme