Do not rely exclusively on looking for malicious or malformed inputs (i.e., do not rely
on a blacklist). A blacklist is likely to miss at least one undesirable input, especially
if the code's environment changes. This can give attackers enough room to bypass the
intended validation. However, blacklists can be useful for detecting potential attacks or