BrowserUK++ above. Often described as whitelisting (allow based) versus blacklisting (deny based). Whitelisting is easier to get right and much safer.