implement file whitelist