That doesn't answer your real question, but here: https://github.com/diaspora/diaspora/blob/develop/lib/postzord/receiver/private.rb#L51

I think you should be able to get a whitelist from https://github.com/diaspora/diaspora/blob/develop/app/models/profile.rb#L16-28