Glossary term
What is allow-list? Meaning for developers
A list of the only values you accept, such as the column names a user may sort by. Everything else is refused.
Learn it properly · Security for DevelopersLesson 1: Injection: SQL Injection, Command Injection and How to Stop ThemA real SQL injection on a tiny login, then the fix with parameterised queries. Also command injection, NoSQL injection and the rule behind all of them: never mix data into code.