Security and styling fix

* Per https://bugzilla.wikimedia.org/show_bug.cgi?id=69623#c7
  vg.config.safeMode is true unless vg.config.domainWhiteList is false
* mw-wiki-graph css: display: inline-block

Change-Id: I8d880ef762e00506e0e1fb570bedd1be3d64dbac