# Input validation

A step of the [Cloud application](https://gradus.kazet.blog/tree/cloud-application) tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Page: https://gradus.kazet.blog/tree/cloud-application/step/input-validation

Validate and sanitise every request body, query and header against a schema before any handler sees it.

Usually comes after: [Secrets management](https://gradus.kazet.blog/tree/cloud-application/step/secrets-management).

Leads to: [Dependency & image scanning](https://gradus.kazet.blog/tree/cloud-application/step/vulnerability-scanning).

## Prompt for your AI assistant

```
Add schema-based validation for all request inputs (body, query, path and headers) at the edge of this application, returning consistent 400 responses for invalid input.
```

Every step of the tree: https://gradus.kazet.blog/tree/cloud-application/llms.txt