Yeah, I noticed that and I like that change.  I don't feel strongly about the default whitelist behaviour either, and I also think that your change made the default a bit saner.

The thing here was just that I like to have a test cover the example from the README where no whitelist is passed at all.

Btw., for the sake of completeness, I'll also add two test cases where both no whitelist and no context are passed.  We have such examples in the README and therefore should have tests covering that as well ;)