3 ms·
What is the recommended way to not code like this? I always take care to not trust raw user input, and add rate limiting and request size limits. I'm sure ther
by vsnf 5y ago
What is the recommended way to not code like this?
I always take care to not trust raw user input, and add rate limiting and request size limits. I'm sure there is more I can be doing, but this is not my area of expertise.
- pjmlp 5y ago- Never trust any kind of input without validation. - Assume that the caller might not be a browser, so don't assume anything regardling workflows between calls. - Keep up to date with OWASP, https://owasp.org/ https://owasp.org/