new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

input_validation/core

2 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Input validation timing in data flow

Input validation should happen as early as possible in the data flow, preferably as soon as the data is received from the external party. Data from all potentially untrusted sources should be subject to input validation, including not only Internet-facing web clients but also backend feeds over extranets from suppliers, partners, vendors or regulators.

Input validation is not primary defense for XSS and SQL injection

Input validation should not be used as the primary method of preventing XSS, SQL injection and other attacks which are covered in respective cheat sheets, but can significantly contribute to reducing their impact if implemented properly.

Give your agent this brain