Software Engineering › Learn step by step › Y12 Secure Software Architecture
Item 209 of 426 · Year 12: Secure Software Architecture, 32 of 57
Input validation
Term Key terms bank
Jump to a topic
- Exam format, question types and command words (46)
- Year 11: Programming Fundamentals (69)
- Year 11: The Object-Oriented Paradigm (33)
- Year 11: Programming Mechatronics (29)
- Year 12: Secure Software Architecture (57)
- Year 12: Programming for the Web (59)
- Year 12: Software Automation (35)
- Year 12: The Software Engineering Project (47)
- Diagrams and modelling tools (18)
- Python, SQL, pseudocode and CSS patterns (33)
Definition
Checking that input meets rules (type, range, length, format, presence) before it is used.
Example: if not age.isdigit(): reject
Found in: syllabus, sample exam and familiarisation guidelines, school notes.
Checking input meets rules before use.
Where you'll use it in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Python: Python validation function
- Short answer: Define, outline or explain it and tie it to the scenario.
- Multiple choice: Pick the option that matches the definition or example.
- Fill in the blanks: Choose this term to complete a statement or table.
Where it has appeared in the paper
Secure Software Architecture (Part A, B, C). Part letters follow each paper’s own layout.
Related past questions
- Sample exam Q18b (3 marks): Developing secure code (Python input validation) Secure Software Architecture (Part B) · 3 marks
- Familiarisation Q9b (3 marks): Developing secure code (Python input validation) Secure Software Architecture (Part C) · 3 marks
- 2025 HSC Q19 (3 marks): Developing secure code (Python) Secure Software Architecture (Part A) · 3 marks
How to use it
A model sentence
“Checking that input meets rules (type, range, length, format, presence) before it is used.” Then apply it: if not age.isdigit(): reject
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
No linked question shows the command word for this term. Across the past python and short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.
Official worked answer
Sample exam Q18b (3 marks): Developing secure code (Python input validation) (3 marks): official criteria and sample answer
Criteria
3: Correct function in Python to check whether a username satisfies the rules. 2: Partially correct function. 1: Some understanding of the problem and Python.
Sample answer
def validate_username(username): valid = True
# length check
if len(username) < 8:
valid = False
elif (not username[0].isupper()):
valid = False
elif (not username[-2].islower()):
valid = False
elif (not username[-1].isdigit()):
valid = False
return valid
Go deeper
- Flashcard: Input validation in Secure Software Architecture (Year 12) · study that set
- Memorise: Defensive data input handling: validation, sanitisation, error handling
- Key terms bank entry: Input validation
- Notes: Design, develop and implement code using defensive data input handling practices,… (Secure Software Architecture (Year 12))
- Notes: Part 3. Where this has been examined (see ../../question_bank.md) (Secure Software Architecture (Year 12))
- Notes: Part 3. Where this has been examined (see ../../question_bank.md) (Python and SQL you must be able to write)
- Full term page: every question, note and marking comment for Input validation
Check yourself
Explain “Input validation” in one sentence, give an example, and name a question type that could test it.
Reveal the answer
Checking that input meets rules (type, range, length, format, presence) before it is used.
Example: if not age.isdigit(): reject
Could be tested as: Python, Short answer, Multiple choice, Fill in the blanks.
Quick multiple choice
What is the difference between input validation and input sanitisation?
- Validation happens only after the data is saved; sanitisation happens before
- Validation encrypts the input; sanitisation decrypts it
- Validation checks that input meets the rules and rejects it if not; sanitisation cleans or removes harmful characters from input
- They are the same process with different names
Show the answer
C
Validation = is this acceptable (type, range, format, length)? Sanitisation = make unsafe input safe (e.g. escape or strip < > and quotes).
Source: original (written for this study pack; not a NESA question). Open it in the multiple-choice bank.