A3:2021 | SQL Injection Mitigation (8) | Cycubix Docs

Input Validation Required?

Since my queries are no longer injectable do I still need to validate my input?

  • YES!

Prevents other types of attacks from being stored in the database

  • Stored XSS.
  • Information leakage.
  • Logic errors - business rule validation.
  • SQL injection.

Often the database is considered trusted