OWASP / Go-SCP

Golang Secure Coding Practices guide
https://owasp.org/www-project-go-secure-coding-practices-guide/
Creative Commons Attribution Share Alike 4.0 International
4.83k stars 369 forks source link

Validation section fix #82

Open gsmcnamara-okta opened 3 years ago

gsmcnamara-okta commented 3 years ago

From the Validation section, is this part backwards?

Anytime data is passed from a trusted source to a less-trusted source,...

PauloASilva commented 1 year ago

You're right it would make more sense the other way around.

We can also consider rephrasing it a bit to something like "Anytime data is exchanged between two parties or systems, integrity checks can be made in order to guarantee that the data has not been tampered with and the receiving party/system receives exactly what the other party/system sent.

What do you think @gsmcnamara-okta? Would you like to open a Pull Request?

Cheers, Paulo A. Silva