api: Update whitelisted paths.

Issue #265.