Prevention and Mitigation Practices CWE
Assume all input is malicious. Use an "accept known good" input validation strategy,
i.e., use a whitelist of acceptable inputs that strictly conform to specifications. Reject any
input that does not strictly conform to specifications, or transform it into something that