updated css whitelist