as opposed to whitelisting/blacklisting typed fields