pull down to refresh

I was struggling to find the actual whitelist. Looks like its configuration defined?