also add block_shellshock urltoolkit for hiawatha for panel