environment variables, and other externally sourced data (e.g.,
filenames, URLs) and reject or filter those that do not pass validation
Least privilege All processes should run with the minimal possible privileges and
should retain those privileges for the minimal amount of time possible