Based on a conversation with @psd, a whitelist is going to be much safer. I'll implement this now.