better whitelist reading for twitter-image and og-image