Skip to content

Glossary: Endpoint, Application and Email Security

input validation

Also written: validation

Checking that input has the expected type, length, range and format before using it. It should be done on the server, preferably with allow lists, so attacks such as SQL injection and XSS are rejected.

Where the book teaches it

Related terms

allow listserver-side validationcanonicalizationparameterized queryoutput encoding