added && and | to whitelisted commands