“But for example, you could either use whitelists or blacklists and allow lists or deny lists as far as like, there should never be a, internal address in those parameters.”

Transcript evidence from Dr. Jared Demott -- Cloud Security & Bug Bounty.