Extra Credit

OWASP Input Validation Cheat Sheets

Official docs outline

8 sections
  1. Input Validation

    Syntactic and semantic validation, allow-lists and regular expression safety.

  2. Bean Validation

    Java Bean Validation annotations and constraints.

  3. Email Validation and Verification

    Safe email address validation and verification flows.

  4. Unvalidated Redirects and Forwards

    Validating redirect targets.

  5. Prototype Pollution Prevention

    Preventing object prototype pollution from untrusted input.

  6. Denial of Service

    Input size limits, ReDoS and resource exhaustion.

  7. XML Security

    XML parsing and schema validation hazards.

  8. Mass Assignment

    Allow-listing bindable fields.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 33