[#198] Added allowed widget templates list

@zzgvh Can you check? Only changed for RSR core, since partnersites already have specific urls.