Request Validation

Definitions

1. The checking of incoming requests to ensure parameters, headers, bodies, methods, and other fields are well-formed, authorized, and safe for the intended operation. Strong request validation helps stop abuse, injection, business-logic bypasses, and malformed traffic before deeper processing begins.

   In plain English: Checking incoming requests to make sure they are valid, expected, and safe.

   Example: "The API bug existed because request validation trusted the client-supplied tenant ID instead of deriving it from the signed token."

Related Terms

• SQL Injection
• XSS
• CSRF
• OWASP
• CORS
• Content Filtering
• Internet Security
• Reflected Input
• Custom Validator