testing whitelisting