Reading club: Web Security & Go (Input Validation)
Details
The article for this month's reading club is Input Validation 1.2, which is part of a longer report written by the OWASP Foundation called Web Application Secure Coding Practices, The Go Language Guide. This topic was inspired by learning that the Go language is one of the popular languages used by cyber criminals in 2020.
In this event, we're going to dive right into the beginning of the report that discusses user input and its associated data as a security risk if left unchecked. It is suggested that "Input Validation" and "Input Sanitization" should be performed in every tier of the application, according to the server's function. Also referenced in this section is the Input Validation checklist from the OWASP Secure Coding Practices Guide.
Similar to past reading clubs, we will have an open discussion about the article and share our opinions, related personal experiences, likes and dislikes.
The report can be found here:
https://info.checkmarx.com/hubfs/Ebooks/The_Go_Language_Guide_Web_Application_Secure_Coding_Practices_OWASP_08.17.20.pdf
