issue #1295: allow whitelisting of web directories