Whitelist possible redirect paths