diff --git a/.gitlab-ci/pipeline.yml b/.gitlab-ci/pipeline.yml
index c7adcd8ada4f4783f7d5a5397b4429b1ed6624e1..72d97bcbe888d8550ef86a242f3706e24c6e5853 100644
--- a/.gitlab-ci/pipeline.yml
+++ b/.gitlab-ci/pipeline.yml
@@ -83,7 +83,7 @@ variables:
     - chromedriver
     - "--no-sandbox"
     - "--log-path=/builds/chromedriver.log"
-    - "--whitelisted-ips="
+    - "--allowed-ips="
     - "--allowed-origins=*"
 
 .with-selenium-chrome: &with-selenium-chrome
diff --git a/composer/Plugin/Scaffold/AllowedPackages.php b/composer/Plugin/Scaffold/AllowedPackages.php
index 988c379139ead2dbefb56dd43d8543fc97dc72db..658162c329e5b34d4ae974fe902f80a0fed57d0d 100644
--- a/composer/Plugin/Scaffold/AllowedPackages.php
+++ b/composer/Plugin/Scaffold/AllowedPackages.php
@@ -66,7 +66,7 @@ public function __construct(Composer $composer, IOInterface $io, ManageOptions $
    *
    * We will implicitly allow the projects 'drupal/legacy-scaffold-assets'
    * and 'drupal/core' to scaffold files, if they are present. Any other
-   * project must be explicitly whitelisted in the top-level composer.json
+   * project must be explicitly allowed in the top-level composer.json
    * file in order to be allowed to override scaffold files.
    * Configuration for packages specified later will override configuration
    * specified by packages listed earlier. In other words, the last listed
@@ -111,7 +111,7 @@ public function event(PackageEvent $event) {
    *
    * We will implicitly allow the projects 'drupal/legacy-scaffold-assets'
    * and 'drupal/core' to scaffold files, if they are present. Any other
-   * project must be explicitly whitelisted in the top-level composer.json
+   * project must be explicitly allowed in the top-level composer.json
    * file in order to be allowed to override scaffold files.
    *
    * @return array
diff --git a/core/.cspell.json b/core/.cspell.json
index 2fb2e803723f3bc9ce4d3f98ef99409c879642ca..0b65759aa4f4274f38500d3475f4a04b0ac1a3b5 100644
--- a/core/.cspell.json
+++ b/core/.cspell.json
@@ -66,12 +66,16 @@
       }
      ],
     "flagWords": [
+      "blacklist",
+      "blacklisted",
       "e-mail",
       "grey",
       "hte",
       "ist",
       "please",
       "queuing",
+      "whitelist",
+      "whitelisted",
       "writeable"
     ],
     "overrides": [
diff --git a/core/misc/autocomplete.js b/core/misc/autocomplete.js
index 5fc6e86cec72f0785716886df8eb603411ac3bc8..150db6c7c7e2d7f88560c3503334af81bc2d9f3a 100644
--- a/core/misc/autocomplete.js
+++ b/core/misc/autocomplete.js
@@ -211,6 +211,7 @@
       once('autocomplete', 'input.form-autocomplete', context).forEach(
         (element) => {
           const $autocomplete = $(element);
+          // cspell:ignore blacklist
           // Allow options to be overridden per instance.
           const blacklist = $autocomplete.attr(
             'data-autocomplete-first-character-blacklist',
diff --git a/core/modules/locale/locale.compare.inc b/core/modules/locale/locale.compare.inc
index 069f200942f515368f59d1204fc06c2fd33a682e..d9ae64af89affc6888250a8567a073fcf3404e09 100644
--- a/core/modules/locale/locale.compare.inc
+++ b/core/modules/locale/locale.compare.inc
@@ -99,15 +99,15 @@ function locale_translation_project_list() {
   if (empty($projects)) {
     $projects = [];
 
-    $additional_whitelist = [
+    $additional_allow_list = [
       'interface translation project',
       'interface translation server pattern',
     ];
     $module_data = _locale_translation_prepare_project_list(\Drupal::service('extension.list.module')->getList(), 'module');
     $theme_data = _locale_translation_prepare_project_list(\Drupal::service('extension.list.theme')->reset()->getList(), 'theme');
     $project_info = new ProjectInfo();
-    $project_info->processInfoList($projects, $module_data, 'module', TRUE, $additional_whitelist);
-    $project_info->processInfoList($projects, $theme_data, 'theme', TRUE, $additional_whitelist);
+    $project_info->processInfoList($projects, $module_data, 'module', TRUE, $additional_allow_list);
+    $project_info->processInfoList($projects, $theme_data, 'theme', TRUE, $additional_allow_list);
 
     // Allow other modules to alter projects before fetching and comparing.
     \Drupal::moduleHandler()->alter('locale_translation_projects', $projects);
diff --git a/core/modules/path_alias/path_alias.services.yml b/core/modules/path_alias/path_alias.services.yml
index a8c7f2dfeee0f46b72d913e6fedbb5f478e21125..e9002aac295fb8a74b7fd4270268b127b0495ae6 100644
--- a/core/modules/path_alias/path_alias.services.yml
+++ b/core/modules/path_alias/path_alias.services.yml
@@ -20,6 +20,7 @@ services:
     tags:
       - { name: backend_overridable }
   Drupal\path_alias\AliasRepositoryInterface: '@path_alias.repository'
+  # cspell:ignore whitelist
   path_alias.whitelist:
     class: Drupal\path_alias\AliasWhitelist
     tags:
diff --git a/core/modules/path_alias/src/AliasManager.php b/core/modules/path_alias/src/AliasManager.php
index c5ed8fdc2ad8b2e9b1b81bff29341421752e0579..334e6730ee018df9b1dab1fe4032d93eb3703084 100644
--- a/core/modules/path_alias/src/AliasManager.php
+++ b/core/modules/path_alias/src/AliasManager.php
@@ -260,6 +260,8 @@ protected function pathAliasPrefixListRebuild($path = NULL) {
    *  Use \Drupal\path_alias\AliasManager::pathAliasPrefixListRebuild instead.
    *
    * @see https://www.drupal.org/node/3467559
+   *
+   * cspell:ignore whitelist
    */
   protected function pathAliasWhitelistRebuild($path = NULL) {
     @trigger_error(__METHOD__ . '() is deprecated in drupal:11.1.0 and is removed from drupal:12.0.0. Use \Drupal\path_alias\AliasManager::pathAliasPrefixListRebuild() instead. See https://www.drupal.org/node/3467559', E_USER_DEPRECATED);
diff --git a/core/modules/path_alias/src/AliasWhitelist.php b/core/modules/path_alias/src/AliasWhitelist.php
index df68b35c4a2532eb2c4df2d75b4293003aa46209..69b0c84bad95ffcb9ca4cf73132145db0f1bb5da 100644
--- a/core/modules/path_alias/src/AliasWhitelist.php
+++ b/core/modules/path_alias/src/AliasWhitelist.php
@@ -2,6 +2,8 @@
 
 namespace Drupal\path_alias;
 
+// cspell:ignore whitelist
+
 /**
  * Cache a list of valid alias prefixes.
  *
diff --git a/core/modules/path_alias/src/AliasWhitelistInterface.php b/core/modules/path_alias/src/AliasWhitelistInterface.php
index ed4ff988680bc8c74fdb7c915121eaa2fc779aff..b3172995ae25767b402594f1d84fad1af0259e2d 100644
--- a/core/modules/path_alias/src/AliasWhitelistInterface.php
+++ b/core/modules/path_alias/src/AliasWhitelistInterface.php
@@ -2,6 +2,8 @@
 
 namespace Drupal\path_alias;
 
+// cspell:ignore whitelist
+
 /**
  * Cache a list of valid alias prefixes.
  *
diff --git a/core/modules/system/system.install b/core/modules/system/system.install
index 35e682600b890899d6588241441b74069b016646..9b8c25c157ed71640d266a9a4c8d74795df1d15d 100644
--- a/core/modules/system/system.install
+++ b/core/modules/system/system.install
@@ -478,7 +478,7 @@ function system_requirements($phase): array {
         '%exception_message' => $e->getMessage(),
       ];
       if ($open_basedir_blocks_urandom) {
-        $requirements['php_random_bytes']['description'] = t('Drupal is unable to generate highly randomized numbers, which means certain security features like password reset URLs are not as secure as they should be. Instead, only a slow, less-secure fallback generator is available. The most likely cause is that open_basedir restrictions are in effect and /dev/urandom is not on the whitelist. See the <a href=":drupal-php">system requirements</a> page for more information. %exception_message', $args);
+        $requirements['php_random_bytes']['description'] = t('Drupal is unable to generate highly randomized numbers, which means certain security features like password reset URLs are not as secure as they should be. Instead, only a slow, less-secure fallback generator is available. The most likely cause is that open_basedir restrictions are in effect and /dev/urandom is not on the allowed list. See the <a href=":drupal-php">system requirements</a> page for more information. %exception_message', $args);
       }
       else {
         $requirements['php_random_bytes']['description'] = t('Drupal is unable to generate highly randomized numbers, which means certain security features like password reset URLs are not as secure as they should be. Instead, only a slow, less-secure fallback generator is available. See the <a href=":drupal-php">system requirements</a> page for more information. %exception_message', $args);