Update app.js

Changed urlSanitizationWhitelist to aHrefSanitizationWhitelist