Make `URIwhitelist` a set instead of an array for membership tests