Allowlist

Default-deny set of permitted hosts, paths, or tool names. Prefer over denylists in security-critical paths.

Also known as: whitelist

See also: security_risk