Safelists vs fixing content globs is one of the most common decision points we see. Here is the honest breakdown.
The short version#
Escaping purge vs teaching the scanner.
Point by point#
| Aspect | Analysis |
|---|---|
| First move | Fix globs: most “missing” classes live in unscanned files |
| Legit safelist | Runtime-composed classes from APIs/databases |
| Smell | Big safelists hide broken scanning |
| Pattern | Regex safelists with variants: { pattern, variants } |
Bottom line#
Pick based on your constraint, not ideology — and remember the comparison pages link to hands-on recipes so you can verify the claim in your own project within minutes.
Related comparisons#
comparisons/index|All comparisons