We are at the mercy of whatever DNS filtering service we use on the backend, which is often not as configurable as we'd like. As of July 2019, the service we use is OpenDNS porn+malware blocking DNS.