Input validation

A step of the Cloud application tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Validate and sanitise every request body, query and header against a schema before any handler sees it.

Usually comes after: Secrets management.

Leads to: Dependency & image scanning.

Prompt for your AI assistant

Add schema-based validation for all request inputs (body, query, path and headers) at the edge of this application, returning consistent 400 responses for invalid input.

This is https://gradus.kazet.blog/tree/cloud-application/step/input-validation as plain HTML. In a browser the page also lets you mark the step forged and copy a message for your AI assistant.