add dynamic_js and dynamic_js to whitelisted paths when we're in
LOCKDOWN mode