Skip to content

Glossary: Web App Security and Authentication

Allowlist

Also written: allow list, blocklist, block list

A list of exactly what is accepted, with everything else refused; a blocklist lists what is refused instead. Allowlists are safer because you can't list every bad input.

Where the book teaches it

Related terms

Output encodingJSON Schema