Input validation and server side validation must work hand-in-hand.
@XSGeek - both should follow the same rules, but assume the other side isn't doing any validation. (hint - it's usually client side not validating)
@0x56 @XSGeek
And there should be a law that all programmers pass a course on communicating errors to stupid people so that they can fix their stupid input mistakes.
And every input mistake not properly rejected by the UI should send a shock to the chair of the UX developer.
My new motto: More stick, less carrot. 😈
@0x56
Yeah, server side should assume every request is a potential attack.
@XSGeek