311-data icon indicating copy to clipboard operation
311-data copied to clipboard

Sanitize/Validate input fields on Contact Form

Open edwinjue opened this issue 3 years ago • 0 comments

Overview

Whitelist an agreed upon list of characters for each input field on the contact form and apply other input validation best practices to prevent unexpected behavior

Action Items

  • [ ] Review best practices and recommendation per OWASP
  • [ ] Determine whitelist character-set (info, info2)
  • [ ] Consider minimum and maximum value range check for numerical parameters and dates, minimum and maximum length check for strings (info)
  • [ ] Implement helper method(s) in ContactForm
  • [ ] Test

Resources/Instructions

https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html

edwinjue avatar Sep 01 '22 05:09 edwinjue