on a blacklist). A blacklist is likely to miss at least one undesirable input, especially
if the code's environment changes. This can give attackers enough room to bypass the
intended validation. However, blacklists can be useful for detecting potential attacks or
determining which inputs are so malformed that they should be rejected outright.