Glossary: Endpoint, Application and Email Security

block list

Also written: negative validation, block lists

A rule that describes bad input, such as quote marks or <script>, and lets everything else through. Attackers can write the same attack in many ways, so block lists always miss something.