- Introduced user registration
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server - Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson. - Simplied loading of resources, by adding resource mappings in MvcConfig. - Refactored plugin loading, now only one class is left for loading the lessons.
This commit is contained in:
@ -0,0 +1,13 @@
|
||||
== Input Validation Required?
|
||||
|
||||
=== Since my queries are no longer injectable do I still need to validate my input?
|
||||
* *YES!*
|
||||
|
||||
=== Prevents other types of attacks from being stored in the database
|
||||
* Stored XSS
|
||||
* Information leakage
|
||||
* Logic errors – business rule validation
|
||||
* SQL Injection
|
||||
|
||||
=== Often the database is considered trusted
|
||||
|
Reference in New Issue
Block a user