use a whitelist in the previous form guesser