https://insinuator.net/tags/client-side-controls/ Recent content in Client-Side Controls on Insinuator.net - Bold Statements Hugo en-us Fri, 01 Apr 2022 00:00:00 +0000 https://insinuator.net/2022/04/solving-client-side-controls-once-and-for-all/ Fri, 01 Apr 2022 00:00:00 +0000 https://insinuator.net/2022/04/solving-client-side-controls-once-and-for-all/ <p>Missing server-side validation consistently scores a place in the <a href="https://owasp.org/www-project-top-ten/">OWASP Top 10</a>. Browsers nowadays offer a lot of ways to easily implement client-side controls, increasing the usability by a lot. They automatically detect missing fields or invalid characters in your input fields and may even validate user input against a regular expressions.</p> <p>However, these controls should only be considered as usability features. When sending data to a back-end system the application must always ensure data integrity by implementing encodings, validations and filters. Even for small applications this is a painful and tedious process. For each possible input, developers together with security experts have to carefully identify the context of each field, how the input is going to be used and what data requirements are present.</p>