# Blacklist vs whitelist onebox

**URL:** <https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811>\
**Category:** Feature\
**Created:** [4. November 2014 um 11:48 UTC](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811 "2014-11-04T11:48:57Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [17. Juni 2016 um 05:25 UTC](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811/5 "2016-06-17T05:25:44Z")

</div>

I just hit this exact issue again today, this is something I would also like build.

In particular for internal Discourse instances there is zero reason to blacklist any sites. In general, I am not really sure what the value is of the whitelist approach. Facebook and Twitter seem to be coping just fine with a blacklist approach.

I guess the big question is:

What kind of abuse does the onebox whitelist only approach prevent? Honestly I am struggling really hard to think of any.

@eviltrout ? @codinghorror ?

---

_[View the full topic](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811)._