Bean Validation Cheat Sheet - Revision history

Dominique RIGHETTO: Point to the official site

2019-07-15T13:56:14Z

Point to the official site

Thunder-Son: Removed Last Revision and Categories Section

2019-02-13T08:53:23Z

Removed Last Revision and Categories Section

Jakub.mackowski: github migration

2019-02-13T08:13:01Z

github migration

Show changes

Aabashkin: Code example bracket fix

2016-12-20T18:00:48Z

Code example bracket fix

Aabashkin: Code example import fix

2016-12-20T17:45:08Z

Code example import fix

Sytzevk: added cascading validation

2016-07-11T18:48:56Z

added cascading validation

Sytzevk: Move Min Max to new paragraph

2016-07-11T17:53:29Z

Move Min Max to new paragraph

Sytzevk: added section on error messages

2016-07-11T16:06:54Z

added section on error messages

Sytzevk: /* Basics */

2016-07-11T15:33:42Z

‎Basics

Jmanico: typo

2016-07-07T03:45:09Z

typo

← Older revision		Revision as of 13:56, 15 July 2019
Line 4:		Line 4:
	The Cheat Sheet Series project has been moved to [https://github.com/OWASP/CheatSheetSeries GitHub]!		The Cheat Sheet Series project has been moved to [https://github.com/OWASP/CheatSheetSeries GitHub]!

−	Please visit [https://~~github~~.~~com/OWASP/CheatSheetSeries/blob/master~~/cheatsheets/Bean_Validation_Cheat_Sheet.md Bean Validation Cheat Sheet] to see the latest version of the cheat sheet.	+	Please visit [https://cheatsheetseries.owasp.org/cheatsheets/Bean_Validation_Cheat_Sheet.html Bean Validation Cheat Sheet] to see the latest version of the cheat sheet.

@@ Line 1: / Line 1: @@
   __NOTOC__
 <div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:Cheatsheets-header.jpg|link=]]</div>
 The Cheat Sheet Series project has been moved to [https://github.com/OWASP/CheatSheetSeries GitHub]!
 Please visit [https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Bean_Validation_Cheat_Sheet.md Bean Validation Cheat Sheet] to see the latest version of the cheat sheet.

@@ Line 111: / Line 111: @@
     ...
-    @RequestMapping(value={"/postArticle", method={RequestMethod.POST})
+    @RequestMapping(value="/postArticle", method=RequestMethod.POST)
     	public @ResponseBody String postArticle(@Valid Article article, BindingResult result, HttpServletResponse response){
@@ Line 174: / Line 174: @@
     ...
-    @RequestMapping(value={"/registerCustomer", method={RequestMethod.POST})
+    @RequestMapping(value="/registerCustomer", method=RequestMethod.POST)
     	   public @ResponseBody String registerCustomer(@Valid Customer customer, BindingResult result, HttpServletResponse response){
@@ Line 236: / Line 236: @@
     ...
-    @RequestMapping(value={"/sendMessage", method={RequestMethod.POST})
+    @RequestMapping(value="/sendMessage", method=RequestMethod.POST)
        	public @ResponseBody String sendMessage(@Valid Message message, BindingResult result, HttpServletResponse response){
@@ Line 311: / Line 311: @@
     ...
-    @RequestMapping(value={"/scheduleVisit", method={RequestMethod.POST})
+    @RequestMapping(value="/scheduleVisit", method=RequestMethod.POST)
        	public @ResponseBody String scheduleVisit(@Valid DoctorVisit doctorvisit, BindingResult result, HttpServletResponse response){
@@ Line 376: / Line 376: @@
     ...
-    @RequestMapping(value={"/postReview", method={RequestMethod.POST})
+    @RequestMapping(value="/postReview", method=RequestMethod.POST)
        	public @ResponseBody String postReview(@Valid Review review, BindingResult result, HttpServletResponse response){

@@ Line 80: / Line 80: @@
 '''Model'''
-    import org.hibernate.validator.constraints.Pattern
+    import org.hibernate.validator.constraints.Pattern;
     public class Article {
@@ Line 144: / Line 144: @@
 '''Model'''
-    import org.hibernate.validator.constraints.Digits
+    import org.hibernate.validator.constraints.Digits;
     public class Customer {
@@ Line 206: / Line 206: @@
 '''Model'''
-    import org.hibernate.validator.constraints.Size
+    import org.hibernate.validator.constraints.Size;
     public class Message {
@@ Line 268: / Line 268: @@
 '''Model'''
-    import org.hibernate.validator.constraints.Past
+    import org.hibernate.validator.constraints.Past;
-    import org.hibernate.validator.constraints.Future
+    import org.hibernate.validator.constraints.Future;
     public class DoctorVisit {
@@ Line 344: / Line 344: @@
 '''Model'''
-    import org.hibernate.validator.constraints.Min
+    import org.hibernate.validator.constraints.Min;
-    import org.hibernate.validator.constraints.Max
+    import org.hibernate.validator.constraints.Max;
     public class Review {

← Older revision		Revision as of 18:48, 11 July 2016
Line 397:		Line 397:
	<br />		<br />

		+	== Cascading Constraints ==
		+
		+	Validating one bean is a good start, but often, beans are nested or in a complete graph of beans. To validate that graph in one go, apply casding valiation with @Valid [http://docs.jboss.org/hibernate/validator/5.2/reference/en-US/html/ch03.html#_cascaded_validation]

	== Additional Constraints ==		== Additional Constraints ==

@@ Line 176: / Line 176: @@
     @RequestMapping(value={"/registerCustomer", method={RequestMethod.POST})
     	   public @ResponseBody String registerCustomer(@Valid Customer customer, BindingResult result, HttpServletResponse response){
      		if(result.hasErrors()){
@@ Line 395: / Line 331: @@
+    }
 <br />
 == Additional Constraints ==

@@ Line 395: / Line 395: @@
+    }
 <br />
 == Additional Constraints ==
@@ Line 417: / Line 418: @@
 Creating custom constraints is beyond the scope of this guide. Please see http://docs.jboss.org/hibernate/validator/5.2/reference/en-US/html/ch06.html
 <br />
 = Author =

@@ Line 54: / Line 54: @@
 * Properties
 * Classes
 For the sake of simplicity all the examples below feature field constraints and all validation is triggered by the controller. Refer to the Bean Validation documentation for a full list of examples.

@@ Line 8: / Line 8: @@
 This article is focused on providing clear, simple, actionable guidance for providing Java Bean Validation security functionality in your applications.
-Bean validation (JSR303 aka [http://beanvalidation.org/1.0/spec/ Bean Validation 1.0] /JSR349 aka [http://beanvalidation.org/1.1/spec/ Bean Validaiton 1.1]) is one of the most common ways to perform [https://www.owasp.org/index.php/Input_Validation_Cheat_Sheet input validation] in Java. It is an application layer agnostic validation spec which provides the developer with the means to define a set of validation constraints on a domain model and then perform validation of those constraints through out the  various application tiers.
+Bean validation (JSR303 aka [http://beanvalidation.org/1.0/spec/ Bean Validation 1.0] /JSR349 aka [http://beanvalidation.org/1.1/spec/ Bean Validation 1.1]) is one of the most common ways to perform [https://www.owasp.org/index.php/Input_Validation_Cheat_Sheet input validation] in Java. It is an application layer agnostic validation spec which provides the developer with the means to define a set of validation constraints on a domain model and then perform validation of those constraints through out the  various application tiers.
 One advantage of this approach is that the validation constraints and the corresponding validators are only written once, thus reducing duplication of effort and ensuring uniformity: