do not require explicit whitelisting anymore
all bugs I reviewed manually indeed required no actioning