fixed whitelist param inside template