VulnerabilityHeuristic4 checks
Input Validation Scanner
Test form fields and API inputs for proper validation and sanitization.
How this scan works
- Submit oversized input (10k chars) to text fields, observe truncation vs. 500/crash
- Submit type-mismatched input (letters into numeric/email fields) and check server-side rejection vs. silent accept
- Submit null-byte and control-character payloads, observe handling
- Cross-reference SQL Injection and XSS findings as validation gaps
