Input Sanitization Lab

Compare allow-list validation with sanitization and learn where each belongs in a request pipeline.

Objectives

Design allow-list rules
Sanitize rich text safely
Handle file uploads
Log rejected input without leaking data

This lab runs in an isolated sandbox. Only use these techniques for authorized educational testing on systems you own or are explicitly permitted to test.