Refine api leak check whitelist