Difference between revisions of "Cpp Coding Standards/SECURITY/ValInput"

Revision as of 18:33, 22 May 2007

If your input comes from external, you must validate that input. Don't try to identify what's illegal and remove that from the input, do it the other way around: check what's legal (because you will likely forget cases of illegal input).

See also David Wheeler's excellent Secure Programming for Linux and Unix HOWTO.