bugfix
more attr whitelisted