I'll keep the whitelist, thanks. No need to annoy visitors for links to CPAN or other sites that we actually /do/ know where they go and that they are appropriate sites to visit.

I like your idea of routing through google to protect from "dangerous" sites. Thanks for that suggestion. And using /robots.txt is something I'll probably do but I may also still require a POST.

Thanks for the details.