Upload: add whitelist