such as "red" or "blue."
Do not rely exclusively on looking for malicious or malformed inputs (i.e., do not rely
on a blacklist). A blacklist is likely to miss at least one undesirable input, especially
if the code's environment changes. This can give attackers enough room to bypass the