Input Validation and Encoding

Avoid Referencing Client Side Data (DOM XSS Defense)

Read more about Avoid Referencing Client Side Data (DOM XSS Defense)

HTML Entity Encode Output to Users (XSS Defense)

Read more about HTML Entity Encode Output to Users (XSS Defense)

HTML Entity Encode Output to Users (XSS Defense)

Read more about HTML Entity Encode Output to Users (XSS Defense)

HTML Entity Encode User Input (XSS Defense)

Read more about HTML Entity Encode User Input (XSS Defense)

File Uploads / Downloads

Read more about File Uploads / Downloads

Ensure Redirect Destination Authorized

Read more about Ensure Redirect Destination Authorized

Canonicalize Before Validation

Read more about Canonicalize Before Validation

Don't Depend on Client Side Validation For Security

Read more about Don't Depend on Client Side Validation For Security

Validate For Extra and Missing Data

Read more about Validate For Extra and Missing Data

Validate Every Parameter

Read more about Validate Every Parameter

Subscribe to Input Validation and Encoding