OWASP Top Ten Proactive Controls 2018 C7: Enforce Access Controls OWASP Foundation
Whereas a whitelist will say it contains a character that is not a number, and only numbers are allowed, so it is invalid. By converting input data into its encoded form, this problem can...