Deny List

A deny list enumerates those input values which will not be accepted by the application.

This approach is usually less secure than an allow list, as it is difficult to specify all possible values that could be used for malicious input.