Whitelisting enough to let these test cases pass.

In particular, GString instantiation, which is basically a bunch of
toString() calls that seem OK.