whitelist, blacklist, and tests