Unplug whitelist

Creating for code review.
Since shouldAllowNavigtion is tri-state, I think we should do the default behaviour only when non-null