Fix broken whitelist/blacklist check

We were iterating over a blank whitelist, which caused all checks
to be marked as implicitly disabled.