Allow me to crossreference - I think this might lead in the same direction: Whitelisting or blacklisting forms