Category denylist validation common pitfalls issues