app/test: add whitelist