Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
Input validation verifies incoming data against expected type, length, and format, ideally server-side with allowlists, to prevent injection attacks.
Input Validation Definition: Input validation verifies incoming data against expected type, length, and format, ideally server-side with allowlists, to prevent injection attacks.
Input validation is the security practice of verifying that data entering an application conforms to expected type, length, format, and range before it is processed. Allowlist or positive validation, which accepts only known-good values, is preferred over denylist filtering, and validation should be enforced on the server side because client-side checks can be bypassed. Robust input validation is a primary defense against injection attacks such as SQL injection, cross-site scripting, and command injection.
Input Validation is one of the topics you'll master in the CSSLP Boot Camp.
CSSLP Boot Camp →