Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: minor edits

...

Sanitization: In many cases, the data may be passed directly to some subsystem. Data sanitization is the process of ensuring that data conform to the requirements of the subsystem to which they are passed. Sanitization also involves ensuring that data also conform to security-related requirements regarding leaking or exposure of sensitive data when output across a trust boundary. Refer to the related guideline IDS01-J. Sanitize untrusted input before processing or storing user inputit for more details on data sanitization. Data sanitization and input validation may coexist and complement each other.

...