whitelist X-UA-Compatible