Web Security 101 - Part 2: User Input

Never trust anything a user puts into your app.

1. Listing


2. Input Validation


3. Encoding


4. Sanitization


5. XSS


6. SQL Injection


7. Command Injection


8. Client-Side Authorization

Listing

Cybersecurity has multiple types of listing.

• Whitelisting is making a list of values that are allowed. For example, a CORS policy that only allows requests from a list of certain sites.


• Blacklisting is making a list of values that aren't allowed. For example, blocking a number on your phone.


• Allowlisting is making a list of trusted files, applications, …

beginners input programming security security 101 web webdev web security