colors such as "red" or "blue."
Do not rely exclusively on looking for malicious or malformed inputs (i.e., do not rely on a blacklist).
A blacklist is likely to miss at least one undesirable input, especially if the code's environment changes.
This can give attackers enough room to bypass the intended validation. However, blacklists can be useful