Use "whitelist" somewhere

[whatyouhide]

Using "whitelist" to refer to the list of accepted origins seems nicer, so we should use it somewhere.