Improve whitelisting in the websh wrapper.
Changelog update.