whitelist user input