Home/ Questions/Q 41367
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-10T15:10:11+00:00

I am developing an application, and have URLs in the format www.example.com/some_url/some_parameter/some_keyword . I

  • 0

I am developing an application, and have URLs in the format www.example.com/some_url/some_parameter/some_keyword. I know by design that there is a maximum length that these URLs will have (and still be valid). Should I validate the URL length with every request in order to protect against buffer overflow/injection attacks? I believe this is an obvious yes but I’m not a security expert so perhaps I am missing something.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. If you are not expecting that input, reject it.

    You should always validate your inputs, and certainly discard anything outside of the expected range. If you already know that your URL’s honestly won’t be beyond a certain length then rejecting it before it gets to the application seems wise.

    • 0