Safer than a block-list, which tries to name every bad value and always misses one. Typical examples are allowed URL schemes, ports and destination hosts.
Allow-list
A list of the only values accepted, with everything else rejected by default.
Safer than a block-list, which tries to name every bad value and always misses one. Typical examples are allowed URL schemes, ports and destination hosts.