White list validation means checking input against a list of known valid values and rejecting anything else (deny-by-default). Black list validation (B) checks against known bad values but allows everything else, which is less secure. White listing is the secure approach because it's a closed set - anything not explicitly permitted is rejected.