Blocklist (denylist)

Validation that tries to name every bad input and reject it. Always incomplete, so it is the weaker alternative to an allowlist.

Learn it hands-on

• SQL Injection Medium