This practice is so prevalent from what I've seen that you'd be better off with a whitelist. Sigh.