whitelist where we use constantize on user input

app/assets/javascripts/admin/commons/association.js

app/controllers/admin/application_controller.rb

...rollers/admin/communication/blocks/headings_controller.rb

app/controllers/admin/communication/blocks_controller.rb

app/controllers/admin/communication/contents_controller.rb

...lers/admin/communication/extranets/contacts_controller.rb

...trollers/admin/communication/websites/pages_controller.rb

...ers/admin/communication/websites/permalinks_controller.rb

app/controllers/admin/users_controller.rb

app/models/communication/extranet/connection.rb

app/models/communication/website/page.rb

app/models/communication/website/page/organization.rb

app/models/communication/website/page/person.rb

app/services/polymorphic_object_finder.rb

...s/admin/communication/extranets/contacts/_toggle.html.erb

.../websites/pages/show/special_pages/_organization.html.erb

...cation/websites/pages/show/special_pages/_person.html.erb