sanitized version of config.js