Defensive data input handling

Term

Jump to a topic

See every item in the sequence

Definition

Writing code that assumes input may be wrong or hostile and handles it safely using input validation, sanitisation and error handling.

Example: Reject non-numeric age, then ask again.

Found in: syllabus, sample exam and familiarisation guidelines, school notes.

Where you'll use it in the test

Syllabus area: Y12 Secure Software Architecture.

Question types it can appear in

Short answer: Explain defensive data input handling (sample Q18a)
Python: Write an input validation function
Multiple choice: Pick the option that matches the definition or example.

Where it has appeared in the paper

Secure Software Architecture (Part A, B, C). Part letters follow each paper’s own layout.

How to use it

A model sentence

General advice, built from the definition and example above

“Writing code that assumes input may be wrong or hostile and handles it safely using input validation, sanitisation and error handling.” Then apply it: Reject non-numeric age, then ask again.

In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.

Command words used with it

From the linked past questions

Explain: Relate cause and effect; make the relationship between things evident; provide why and/or how. (Sample exam Q18a (3 marks): Defensive data input handling)

Official worked answer

Sample exam Q18a (3 marks): Defensive data input handling (3 marks): official criteria and sample answer

Criteria

3: Explains how defensive data input handling practices can be implemented for the website. 2: Outlines some features of data input handling practices. 1: Some relevant information.

Sample answer

Data sanitisation using client-side scripting can clean the data and remove dangerous input. Input validation on the client-side can check that entered data meets all of the requirements before getting processed by the server. Errors generated by data not meeting rules can be shown to the user.

Open the question page

Go deeper

Flashcard: Defensive data input handling in Secure Software Architecture (Year 12) · study that set
Memorise: Defensive data input handling: validation, sanitisation, error handling
Master answer: sample-q18a (3 marks, short answer (explain, max 75 words)) (Master model answers: Secure Software Architecture)
Notes: Defensive data input handling: validation, sanitisation, error handling (Secure Software Architecture (Year 12))
Notes: Design, develop and implement code using defensive data input handling practices,… (Secure Software Architecture (Year 12))
Notes: Part 3. Where this has been examined (see ../../question_bank.md) (Secure Software Architecture (Year 12))
Full term page: every question, note and marking comment for Defensive data input handling

Check yourself

Explain “Defensive data input handling” in one sentence, give an example, and name a question type that could test it.

Reveal the answer