Request whitelisting