Glossary: Application and Credential Attacks, and AI Risks

allow list

Also written: allowlist, approved addresses

A list of the only things allowed, such as approved image sites the shop's import page may fetch from. Everything else is refused, which makes it a key defense against SSRF.