use a whitelist array