search field whitelisting