Input Validation

In this segment, we continue our study of format strings in Swift.

In this segment, we continue our exploration of Swift 5.1 raw strings. We also examine what Unicode scalar values are and list how to deal with unsafe characters.

In this activity, we continue to practice with property wrappers to clamp values to upper and lower boundaries.

In this activity, we practice disabling autocorrection in Swift.

In this segment, we learn about the new Swift 5.1 feature called property wrappers. We learn how to use property wrappers to clamp values, trim whitespace and newlines and sanitize input.

In this segment, we learn the difference between trusted and untrusted data, as well as how to identify and diagram trust boundaries both within and outside our app.

In this activity, we practice sanitization of various text input fields in our Swift mobile app.

In this segment, we test the UIWebView vulnerability for ourselves.

In this activity, we learn how to use CocoaPods to install the external libraries we will use to work with JSON.

In this activity, we continue with our Swift playground to match international phone numbers, URLs and emails.

In this activity, we continue with the previous app to learn about the underlying mechanism of using an API key to make a call to a server and how to utilize it in our app.

In this segment, we examine server-side SQL stored procedures as another mechanism to protect against SQL injection.

In this segment, we conclude our study of regular expressions, including examining some practical examples used in Swift.

In this activity, we conclude our exercise into filtering malicious content from a QR code.

In this segment, we learn what input sanitization is and how to achieve it using the filter() method and regular expressions in Swift.

In this segment, we learn how format strings can be abused by attackers. We examine the most common NSString parameters that are used in format string attacks. We also learn which C, Core Foundation and Cocoa functions are the most vulnerable to format string attacks.

In this segment, we learn about cross-site scripting and cross-site request forgery attacks, and how to protect against them.

In this segment, we learn what format strings are and work with examples in Swift.

In this activity, we continue to work with property wrappers to sanitize input.

In this segment, we examine what special characters are and the risk they pose when included in an input string. We also learn about string literals in Swift and how to escape special characters. We are also introduced to raw string examples in Swift 5.1.

In this activity, we use a Swift playground to practice using property wrappers to trim out whitespaces and newlines.

In this segment, we examine the specific risks associated with iOS autocorrection and autofill, and how to programmatically address those risks.

In this activity, we continue working with input sanitization in our mobile app.

In this activity, we learn how to deserialize incoming data from a server and display it in our app.

In this activity, we continue with our Swift playground to test US Social Security numbers and number formats for popular credit cards.

In this segment, we study the infamous UIWebView vulnerability, including full code and results of the exploit. We also discuss how to protect against the UIWebView vulnerability.

In this segment, we learn what it means to serialize and deserialize and object from Swift to JSON. We learn about the risks of deserialization and how to protect against those risks.

In this activity, we use a Swift playground with NSPredicate to test various regex filters to match password requirements and US/Canada phone numbers.

In this segment, we learn about SQL injection, including the basics of the SQL language and the code involved in a SQL injection exploit. We learn how to mitigate this risk in SQLite by parameterizing queries.

In this segment, we continue our study of how to use regular expressions, including escaping characters and practical everyday examples.

In this activity, we work with the original malicious QR code responsible for exploiting the notorious iOS 11 camera app vulnerability. We learn how to filter malicious content from a QR code, thus rendering the exploit harmless.

In this activity, we practice working with format strings in Swift.

In this activity, we explore the mechanisms of cross-site scripting and the potential damage it can cause.