Regular expression white/black list on query string