WEBVTT

00:00:00.000 --> 00:00:06.000
Does a browser form check make submitted information safe to use?

00:00:06.000 --> 00:00:13.000
The server also needs to validate incoming information before processing it.

00:00:13.000 --> 00:00:18.000
Check both useful feedback and trusted processing.
6 input-validation basics.

00:00:18.000 --> 00:00:30.000
Define the accepted values
Decide which types, ranges and formats the task actually permits.
Expected type · Allowed range · Required information

00:00:30.000 --> 00:00:42.000
Help the visitor early
Browser checks can identify common mistakes before submission.
Useful form feedback · Recognisable issue · Clear correction

00:00:42.000 --> 00:00:54.000
Validate on the server too
A request can reach the server without following the normal form interface.
Incoming request · Server validation · Processing decision

00:00:54.000 --> 00:01:06.000
Check important constraints
Review values such as allowed options, lengths and numeric ranges.
Allowed option · Suitable length · Valid number range

00:01:06.000 --> 00:01:18.000
Handle invalid input clearly
Return useful feedback without pretending the task succeeded.
Rejected value · Helpful response · Accurate task status

00:01:18.000 --> 00:01:30.000
Use layered protection
Input validation is one part of protecting an application.
Validated information · Other security controls · Reviewed implementation

00:01:30.000 --> 00:01:39.000
Your checklist
Define the accepted values · Help the visitor early · Validate on the server too · Check important constraints · Handle invalid input clearly · Use layered protection

00:01:39.000 --> 00:01:47.000
Test the actual submitted values and the server response.
jerseyweb.je