Glossary: Endpoint, Application and Email Security

allow list

Also written: positive validation, allow lists

A rule that describes what good input looks like and rejects everything else, such as accepting a zip code only if it is exactly five digits. It is stronger than a block list because it doesn't need to know every attack.