While that seems like a somewhat sensible approach for non-technical end users (modulo various kinds of runnable scripts), a whitelisting approach can&#x27;t possibly work in an organization doing software development.<p>I can&#x27;t think of any technological approach that <i>would</i> work in such an organization, short of completely redesigning end-user client systems.