Show notes
Input validation checks whether data supplied to an application matches the expected format, type, length, range, and permitted values before the application processes it. Certification exams may present malformed or unexpected user input and ask which secure-development practice can reduce the resulting risk. Applications should treat information from forms, files, cookies, application programming interfaces, headers, and external systems as untrusted. A date field should accept valid dates, a quantity should remain within an approved numeric range, and a filename should reject characters…
Website: share.transistor.fm
