package whitelist blacklisting for resource retrieval