Glossary: Endpoint, Application and Email Security
input validation
Also written: validation
Checking that input has the expected type, length, range and format before using it. It should be done on the server, preferably with allow lists, so attacks such as SQL injection and XSS are rejected.
Where the book teaches it
Related terms
allow listserver-side validationcanonicalizationparameterized queryoutput encoding