Ho-humm... this looks very internal and undocumented. Can we rely on it? Maybe it would be better to have a manual whitelist, even if that introduces redundancy?

I was wondering whether we even need a whitelist in a setting where people can just use existing Angular filters, and where everyone has access to anything (since it's internal) anyways? /cc @grobie