{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-input-validation",
  "id": "input-validation",
  "kind": "mechanism",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-security-core",
    "json": "https://banes-lab.com/json/records/layer/security-core",
    "label": "Security Core",
    "markdown": "https://banes-lab.com/records/layer/security-core.md",
    "ref": "layer:security-core"
  },
  "name": "Input Validation",
  "ref": "architecture:input-validation",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-validation-rules",
          "json": "https://banes-lab.com/json/records/lexicon/validation-rules",
          "label": "Validation Rules",
          "markdown": "https://banes-lab.com/records/lexicon/validation-rules.md",
          "ref": "lexicon:validation-rules"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-schema",
          "json": "https://banes-lab.com/json/records/lexicon/schema",
          "label": "Schema",
          "markdown": "https://banes-lab.com/records/lexicon/schema.md",
          "ref": "lexicon:schema"
        }
      ],
      "relation": "requires"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-security",
          "json": "https://banes-lab.com/json/records/lexicon/security",
          "label": "Security",
          "markdown": "https://banes-lab.com/records/lexicon/security.md",
          "ref": "lexicon:security"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-correctness",
          "json": "https://banes-lab.com/json/records/architecture/correctness",
          "label": "Correctness",
          "markdown": "https://banes-lab.com/records/architecture/correctness.md",
          "ref": "architecture:correctness"
        }
      ],
      "relation": "reinforces"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-fail-fast",
          "json": "https://banes-lab.com/json/records/architecture/fail-fast",
          "label": "Fail Fast",
          "markdown": "https://banes-lab.com/records/architecture/fail-fast.md",
          "ref": "architecture:fail-fast"
        }
      ],
      "relation": "enables"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-trusting-external-input",
          "json": "https://banes-lab.com/json/records/lexicon/trusting-external-input",
          "label": "Trusting External Input",
          "markdown": "https://banes-lab.com/records/lexicon/trusting-external-input.md",
          "ref": "lexicon:trusting-external-input"
        }
      ],
      "relation": "conflicts-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-input-flexibility",
          "json": "https://banes-lab.com/json/records/lexicon/input-flexibility",
          "label": "Input Flexibility",
          "markdown": "https://banes-lab.com/records/lexicon/input-flexibility.md",
          "ref": "lexicon:input-flexibility"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#tension-input-flexibility-input-validation",
          "json": "https://banes-lab.com/json/records/tension/input-flexibility-input-validation",
          "label": "Input Validation / Input Flexibility",
          "markdown": "https://banes-lab.com/records/tension/input-flexibility-input-validation.md",
          "ref": "tension:input-flexibility-input-validation"
        }
      ],
      "relation": "tensions"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/algorithms#algorithms-no-unvalidated-input",
          "json": "https://banes-lab.com/json/records/algorithms/no-unvalidated-input",
          "label": "Boundary Validation Over Unvalidated Input",
          "markdown": "https://banes-lab.com/records/algorithms/no-unvalidated-input.md",
          "ref": "algorithms:no-unvalidated-input"
        }
      ],
      "relation": "contracts"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-trusting-external-input",
          "json": "https://banes-lab.com/json/records/lexicon/trusting-external-input",
          "label": "Trusting External Input",
          "markdown": "https://banes-lab.com/records/lexicon/trusting-external-input.md",
          "ref": "lexicon:trusting-external-input"
        }
      ],
      "relation": "violated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-schema-validation",
          "json": "https://banes-lab.com/json/records/architecture/schema-validation",
          "label": "Schema Validation",
          "markdown": "https://banes-lab.com/records/architecture/schema-validation.md",
          "ref": "architecture:schema-validation"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-mandatory",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-mandatory",
          "label": "mandatory",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-mandatory.md",
          "ref": "vocabulary:severity-mandatory"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/records/architecture-category/security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/records/architecture-category/security-privacy-compliance-governance.md",
          "ref": "architecture-category:security-privacy-compliance-governance"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-preconditions",
          "json": "https://banes-lab.com/json/records/architecture/preconditions",
          "label": "Preconditions",
          "markdown": "https://banes-lab.com/records/architecture/preconditions.md",
          "ref": "architecture:preconditions"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-defensive-programming",
          "json": "https://banes-lab.com/json/records/architecture/defensive-programming",
          "label": "Defensive Programming",
          "markdown": "https://banes-lab.com/records/architecture/defensive-programming.md",
          "ref": "architecture:defensive-programming"
        }
      ],
      "relation": "required-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-defensive-programming",
          "json": "https://banes-lab.com/json/records/architecture/defensive-programming",
          "label": "Defensive Programming",
          "markdown": "https://banes-lab.com/records/architecture/defensive-programming.md",
          "ref": "architecture:defensive-programming"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-security-by-design",
          "json": "https://banes-lab.com/json/records/architecture/security-by-design",
          "label": "Security by Design",
          "markdown": "https://banes-lab.com/records/architecture/security-by-design.md",
          "ref": "architecture:security-by-design"
        }
      ],
      "relation": "refactors"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-parameterized-queries",
          "json": "https://banes-lab.com/json/records/architecture/parameterized-queries",
          "label": "Parameterized Queries",
          "markdown": "https://banes-lab.com/records/architecture/parameterized-queries.md",
          "ref": "architecture:parameterized-queries"
        }
      ],
      "relation": "reinforced-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/software-architecture/scale#systems-built-around-a-model",
          "json": "https://banes-lab.com/json/software-architecture/scale/systems-built-around-a-model",
          "label": "Systems built around a model",
          "markdown": "https://banes-lab.com/software-architecture/scale/systems-built-around-a-model.md",
          "ref": "chapter:/software-architecture/scale#systems-built-around-a-model"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-contracts-interfaces-compatibility",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-contracts-interfaces-compatibility",
          "label": "Contracts / Interfaces / Compatibility",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-contracts-interfaces-compatibility.md",
          "ref": "chapter:/ontology#architecture-category-contracts-interfaces-compatibility"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-correctness-determinism-verification",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-correctness-determinism-verification",
          "label": "Correctness / Determinism / Verification",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-correctness-determinism-verification.md",
          "ref": "chapter:/ontology#architecture-category-correctness-determinism-verification"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-error-handling-resilience",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-error-handling-resilience",
          "label": "Error Handling / Resilience",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-error-handling-resilience.md",
          "ref": "chapter:/ontology#architecture-category-error-handling-resilience"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-core-vocabulary",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-core-vocabulary",
          "label": "Core Vocabulary",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-core-vocabulary.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-core-vocabulary"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-quality-attributes",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-quality-attributes",
          "label": "Quality Attributes",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-quality-attributes.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-quality-attributes"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-security-privacy-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology/algorithms#algorithms-domain-architectural-rules",
          "json": "https://banes-lab.com/json/ontology/algorithms/algorithms-domain-architectural-rules",
          "label": "Architectural Rules",
          "markdown": "https://banes-lab.com/ontology/algorithms/algorithms-domain-architectural-rules.md",
          "ref": "chapter:/ontology/algorithms#algorithms-domain-architectural-rules"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-resolutions",
          "json": "https://banes-lab.com/json/ontology/schema/the-resolutions",
          "label": "The resolutions",
          "markdown": "https://banes-lab.com/ontology/schema/the-resolutions.md",
          "ref": "chapter:/ontology/schema#the-resolutions"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "A mechanism that checks external input against a schema at the boundary before core logic uses it.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-output-encoding",
      "json": "https://banes-lab.com/json/records/architecture/output-encoding",
      "label": "Output Encoding",
      "markdown": "https://banes-lab.com/records/architecture/output-encoding.md",
      "ref": "architecture:output-encoding"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-attribute-based-access-control",
      "json": "https://banes-lab.com/json/records/architecture/attribute-based-access-control",
      "label": "Attribute-Based Access Control (ABAC)",
      "markdown": "https://banes-lab.com/records/architecture/attribute-based-access-control.md",
      "ref": "architecture:attribute-based-access-control"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "const input = CreateFooSchema.parse(request.body);\nfooStore.save(input);",
    "before": "const input = request.body as Foo;\nfooStore.save(input);",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": null,
  "scope": [
    "API",
    "boundary",
    "function"
  ],
  "severity": "mandatory"
}
