how to add a whitelist in dynamic routing so users cant navigate to any url they want