instantclick: default whitelist