InputValidation

Per-endpoint validation preventing injection-class bugs — SQL injection, XSS, command injection.

Why we need this / what value this brings

Unvalidated input is the root cause of most injection-class vulnerabilities (SQL injection, XSS).

When to use this

Every endpoint that accepts user input, without exception.

How to use or implement this

Validate at the boundary using your schema layer (Pydantic on the backend) — reject invalid input before it reaches business logic.

Research questions

• Is every backend endpoint validating input via Pydantic models, or are any raw/unvalidated paths still open?

---

Empty folder — drop notes, links, and findings here as you research.