Input Validation
- •
def
- •
checking and correcting all input against what is actually expected, before an application processes it
- •
- •
process
- •
document all input methods (forms, fields, expected types); normalize the data (e.g., a ZIP code should only be a specific length/format) and fix or reject anything that doesn't conform
- •
- •
why it matters
- •
fuzzers and attackers will find whatever validation gaps you missed
- •
- •