whitelist accessible files, thanks to Török Edwin (@edwintorok)