Input Validation / Input Flexibility

Kind: tension

Record: tension:input-flexibility-input-validation

Canonical: Schema

"input-validation" (security-core layer) is traded against "Input Flexibility" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Input Flexibility" and choosing an explicit operating point.

Listed in Tensions, after Attribute-Based Access Control (ABAC) / Policy Complexity and before Output Encoding / Formatting Flexibility.

In tension with

Mechanism

Linked from