Support for safe external scripts via explicit whitelist.