311-data
311-data copied to clipboard
Sanitize/Validate input fields on Contact Form
Overview
Whitelist an agreed upon list of characters for each input field on the contact form and apply other input validation best practices to prevent unexpected behavior
Action Items
- [ ] Review best practices and recommendation per OWASP
- [ ] Determine whitelist character-set (info, info2)
- [ ] Consider minimum and maximum value range check for numerical parameters and dates, minimum and maximum length check for strings (info)
- [ ] Implement helper method(s) in ContactForm
- [ ] Test
Resources/Instructions
https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html