Don't assume the message is safe if the first regex doesn't match. Check other regexes too.
Add regex support for absolute whitelist
Differentiate between regex and non-regex entries to whitelist
If the entry (blacklist or abs whitelist) is regex, don't run the regular check on it.