---
schema_version: "1"
id: a0d6ea32c326f50c847c85f6ccea61ea281af53480fdbe1a4856cf880609b221
title: Use a Positive Security Model
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_use_a_positive_security_model.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_use_a_positive_security_model.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9fc09c1626affc32ff17f73a3b18e33fdb311b0be99e60705cc933cc5db2ae4b
description: A positive security model, also known as a safelist approach, defines what is allowed and rejects everything else. Use this approach in B2C Commerce to make sure that you can allowlist only the known good input instead of trying to disallow all possible bad input.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Use a Positive Security Model

A positive security model, also known as a safelist approach, defines what is allowed and rejects everything else. Use this approach in B2C Commerce to make sure that you can allowlist only the known good input instead of trying to disallow all possible bad input.

In addition, take the following precautions.

- When validating user data input, verify the input against a safelist of alphanumeric characters instead of filtering out bad input.
- When configuring an access control area, deny access to everything and allow access only to specific authorized resources or functions.