259fd19c1b
- Now using Spring Boot for classloading, this way local development does not need to restart the complete server - Fixed all kinds of dependencies on the names of the lessons necessary to keep in mind during the creation of a lesson. - Simplied loading of resources, by adding resource mappings in MvcConfig. - Refactored plugin loading, now only one class is left for loading the lessons.
14 lines
337 B
Plaintext
14 lines
337 B
Plaintext
== Input Validation Required?
|
||
|
||
=== Since my queries are no longer injectable do I still need to validate my input?
|
||
* *YES!*
|
||
|
||
=== Prevents other types of attacks from being stored in the database
|
||
* Stored XSS
|
||
* Information leakage
|
||
* Logic errors – business rule validation
|
||
* SQL Injection
|
||
|
||
=== Often the database is considered trusted
|
||
|