in that case I'd do a whitelist