Don't trust user input - Revision history

KirstenS at 23:52, 7 April 2009

2009-04-07T23:52:54Z

KirstenS at 13:16, 7 September 2008

2008-09-07T13:16:50Z

KirstenS: /* Description */

2008-09-05T19:14:40Z

‎Description

KirstenS at 19:14, 5 September 2008

2008-09-05T19:14:13Z

Marcin at 19:40, 24 July 2008

2008-07-24T19:40:14Z

Cduffey346 at 01:12, 19 July 2008

2008-07-19T01:12:22Z

Cduffey346: Inserted template as a placeholder

2008-07-19T01:11:53Z

Inserted template as a placeholder

New page

{{Template:Principle}}

Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

==Description==

A principle is a simple rule that helps to guide security decisions in complex situations.
# Start with a one-sentence description of the principle
# Describe the principle and how it should be applied to security decisions

==Examples==

===Short example name===
: A short example description, small picture, or sample code with [http://www.site.com links]

===Short example name===
: A short example description, small picture, or sample code with [http://www.site.com links]

==Related [[Vulnerabilities]]==

* [[Vulnerability 1]]
* [[Vulnerabiltiy 2]]

==Related [[Controls]]==

* [[Controls 1]]
* [[Controls 2]]

==References==

* http://www.link1.com
* [http://www.link2.com Title for the link2]

← Older revision		Revision as of 23:52, 7 April 2009
Line 3:		Line 3:
	<br>		<br>
	[[Category:OWASP ASDR Project]]		[[Category:OWASP ASDR Project]]
−	~~[[ASDR Table of Contents]]__TOC__~~

← Older revision		Revision as of 13:16, 7 September 2008
Line 36:		Line 36:
	* http://www.link1.com		* http://www.link1.com
	* [http://www.link2.com Title for the link2]		* [http://www.link2.com Title for the link2]
		+
		+	[[Category:Principle]]

← Older revision		Revision as of 19:14, 5 September 2008
Line 9:		Line 9:

	==Description==		==Description==
−
−	~~A principle is a simple rule that helps to guide security decisions in complex situations.~~
−	~~# Start with a one-sentence description of the principle~~
−	~~# Describe the principle and how it should be applied to security decisions~~

	A user or client will not always submit data your application will expect. By building robust applications that do not trust user input by default, you ensure the application will be able to handle unexpected data gracefully. Examples of user input include: form data, client information such as user-agent strings, cookies, referer, etc. Anything that is submitted in an HTTP request should be considered user input.		A user or client will not always submit data your application will expect. By building robust applications that do not trust user input by default, you ensure the application will be able to handle unexpected data gracefully. Examples of user input include: form data, client information such as user-agent strings, cookies, referer, etc. Anything that is submitted in an HTTP request should be considered user input.

← Older revision		Revision as of 19:14, 5 September 2008
Line 1:		Line 1:
	{{Template:Principle}}		{{Template:Principle}}
		+
		+	<br>
		+	[[Category:OWASP ASDR Project]]
		+	[[ASDR Table of Contents]]__TOC__
		+

	Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''		Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

← Older revision		Revision as of 01:12, 19 July 2008
Line 1:		Line 1:
−
	{{Template:Principle}}		{{Template:Principle}}

@@ Line 9: / Line 9: @@
 # Describe the principle and how it should be applied to security decisions
 ==Examples==
-===Short example name===
+===Phone number===
 : A short example description, small picture, or sample code with [http://www.site.com links]
@@ Line 27: / Line 28: @@
 ==Related [[Controls]]==
-* [[Controls 1]]
+* [[Input Validation]]