#81 Added support for whitlisting of header options in addition to whitelisting
 of some js injection options. Some further testing is still needed