change whitelist to extensions and reword