Whitelist validation (also called positive validation) checks input against a known list of valid values - anything not on the list is rejected. This is more secure than blacklist validation because you explicitly define what's allowed. Option B describes blacklist validation, which is weaker. Whitelist examples: allowing only alphanumeric characters, or only specific file extensions.