Having written it, I can assure you that cookies are not required for it to work, and thus no whitelisting should be necessary. I think you may've had some other problem.
My mistake. It just seems broken because when you press "Enter" on an incorrect answer, nothing happens. I guess I had better luck after enabling cookies.