Pricing Blog

Is there any way to sanitize the input using formula?

  • fss21.-1365352352122667108

    fss21

    3 months ago

    Hi, looking for a way to sanitize the input so that we can call the api in more secure way. Currently it is not possible to do this?
  • Tod-1365352354274082919

    Tod

    3 months ago

    Great job @fss21! Your contribution to the Nordcraft Community just made you advance to Community Level 2! 🌲
  • lucasg-1365354216817692734

    Lucas G

    3 months ago

    Input sanitization has different levels.
  • Forms have basic validation built-in, beyond that you can use regex and custom formulas to check things further
  • fss21.-1365355274185216071

    fss21

    3 months ago

    thanks! do you have any recommendations on what should be implemented with custom formula to mitigate at least critical ones?
    the only thing i have done so far is that I have convered input into "text" so that script tag does not work
  • lucasg-1365358561672040481

    Lucas G

    3 months ago

    Casting the type to string doesn't necessarily inhibit scripts. It's all text either way
  • Script tags should be checked for and removed entirely
  • Also, even if you validate on an input it doesn't mean that soembody cannot circumvent it and send it directly to your server
  • That's why input has different levels
  • Client-side validation is first line, things like syntax, character length, etc
  • Then data should also be validated wherever you are receiving it
  • fss21.-1365361771170234478

    fss21

    3 months ago

    thank you so much! got it