Allowlist
An allowlist is an explicit collection of permitted entities, values, or operations, with items outside the collection disallowed.
Refactoring to Rust
A whitelist is a selection rule that restricts generated bindings to explicitly matching declarations.
- How it is used
- Uses bindgen allowlists to reduce irrelevant declarations in generated NGINX FFI bindings.
- How deep it goes
- Explains prefix-based filtering and its size reduction, but defers individually allowing every required declaration.
- Examples
- Demonstrates ngx_ type, function, and variable filters for NGINX declarations.
- What you can do after
- Apply bindgen filters to generate a smaller set of NGINX Rust bindings.
AI Agents in Action, Second Edition
Tool allowlisting is a security technique that restricts an agent's visible or callable tools to an explicitly approved set.
- How it is used
- Restricts an autonomous agent's visible or callable tools as part of defense-in-depth security.
- How deep it goes
- Defines approved-tool boundaries and pairs them with safeguards, but does not detail an implementation beyond a secure prompt listing.
- Examples
- Uses a secure prompt that allowlists web_fetch and supplies its JSON schema while rejecting untrusted instructions.
- What you can do after
- Operate/configure an agent by exposing only authorized tools and combining that boundary with additional execution safeguards.
Read how AI Agents in Action, Second Edition explains allowlist →
Related concepts
- mcp clientused by · An MCP client is a software component that connects a host application to an MCP server to discover and invoke capabilities exposed through the Model Context Protocol.
- SQL injectionaddresses · SQL injection is an attack in which crafted, untrusted input alters the structure or meaning of a SQL statement, potentially causing unintended database operations.
- rust bindgenconfigures · rust bindgen is a code-generation tool that generates Rust foreign-function interface bindings from C and C++ declarations.
- SSRFaddresses · Server-side request forgery is an attack in which an adversary induces a server to send requests to attacker-selected internal or external network resources.
- request messageuses · An HTTP request is a message sent by a client to a server that specifies a method and target and may include headers and a body.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.