@cvan: a whitelist looks more robust than a blacklist in that case