input-validation

Prevent SQL and NoSQL injection by validating, sanitizing, and encoding all user inputs. Implement allowlist validation, enforce data types, and apply parameterized queries to secure all code paths.

Sanitize user input for XSS prevention by validating data against allowlists and enforcing data types. Output encoding must be applied to all user inputs before rendering them in web contexts.

Injection prevention techniques map to CWE and ASVS standards by returning ASVS-mapped findings. This provides detection patterns and secure query examples that align with application security verification requirements.

Input validation protects against LDAP and XPath injection by validating, sanitizing, and encoding user inputs across all code paths. It provides secure input handling patterns specifically mapped to these injection vectors.

Implement secure parameterized queries for command shell inputs by sanitizing inputs with allowlists and enforcing strict data types. This prevents shell injection by separating code from user-supplied data across code paths.