Switch whitelists to constants for security