r5
r5 copied to clipboard
HTTP Request/Incoming JSON Validation
We should consider explicitly validating all incoming data in HTTP requests in a specific step. We assume a lot of correctness because the data is coming from an interface that we control, but some bugs trickle through and the errors we encounter can be opaque.
@abyrd do you know if there is an existing HTTP Request validation library for Java? This would be something separate from a database schema, as the incoming data for models is sometimes partial or contains other binary data.