master
Remove tailwindcss from the default security.exec.allow list (note)
config/security: Add "! " negation to Whitelist, harden default http.urls