The 14(c) system will become a modern, digital-first service. Applicants will be provided an intuitive online experience, guiding them through the information needed to complete their application correctly.
Other
16
stars
17
forks
source link
Add server side validation to be consistent with client side validation #731
Validation must be consistently implemented both at the UI and API level. This indirectly also helps with security.
Acceptance Criteria
Ensure that all API calls that accept input parameters are validated if those parameters contain data from client side fields that have validation performed against them.
[ ] All Required validation (server side) must be consistent with client side required validation.
[ ] All Required Validation (server side) must also be type consistent with data type expected. Ex: entered number when number was expected or not? Is Data truncated? Date?
[ ] All Range validation (server side) must be consistent with client side range validation. Ex: If number entered needs to be > 0; < some_integer. 14C online client side is currently using <, > and not <=, >= !!!
Validation must be consistently implemented both at the UI and API level. This indirectly also helps with security.
Acceptance Criteria
Ensure that all API calls that accept input parameters are validated if those parameters contain data from client side fields that have validation performed against them.
regex = /^[0-9]{5}(?:-[0-9]{4})?$/i; Won't work for int'l addresses!!!