# Blacklist vs whitelist onebox

**URL:** <https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811>\
**Category:** Feature\
**Created:** [2014 年 11 月 4 日午前 11:48 UTC](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811 "2014-11-04T11:48:57Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)\
**Post date:** [2016 年 6 月 17 日午後 6:00 UTC](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811/9 "2016-06-17T18:00:32Z")

</div>

For the record I always thought it should be blacklist, not whitelist, but I also had no problem erring on the side of security. In early discussions I believe @codinghorror insisted it should be whitelist.

---

_[View the full topic](https://meta.discourse.org/t/blacklist-vs-whitelist-onebox/21811)._