ISM-1240

Validation or sanitisation is performed on all input handled by web applications.

Topic
Web application input handling
Applicable to
all

History

Priority
must
Mar 2022
Validation or sanitisation is performed on all input handled by web applications.
Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.
2017
Validation and/or sanitisation must be performed on all input handled by a web application.
Control Text Changed. No public explaination.
2015
Agencies must perform appropriate validation and/or sanitisation on all input handled by aweb application.