DI for whitelist and allow set by options