Security Test: Positive integer validation¶

Description¶

Default Severity: info

When you fail to confirm that an input is a positive integer, you leave the door open for unexpected or malicious values—like negative numbers, zero, or even non-numeric strings—that can disrupt the program's behavior. This can lead to errors, data inconsistencies, or even allow attackers to trigger more serious vulnerabilities like SQL injections or buffer overflows. Developers often trip up when they assume inputs will automatically fall into an expected range instead of explicitly checking for only positive integers, which can lead to risky consequences if not addressed.

Configuration¶

Identifier: schema/positive_integer_validation

Examples¶

All configuration available:

checks:
  schema/positive_integer_validation:
    skip: false # default

Compliance and Standards¶