add white-list for uploader