Skip to main content

Hitachi ID Password Manager web form input protection

The Hitachi ID Password Manager web user portal is implemented using the standard common gateway interface (CGI) mechanism, available on all web servers. CGI programs are exclusively responsible for accepting user input and displaying web pages. As such, the CGI programs may be attacked so need to incorporate strong protections.

All Password Manager CGI programs use a standard string library to validate all inputs and protect against buffer overflow, SQL injection, cross site scripting and similar attacks. This is done by checking maximum input lengths, filtering out special characters and HTML codes, checking for valid formatting and value ranges, etc.

Read More:

  • Multi-layered Security Architecture:
    Security is implemented as multiple layers, each of which acts to protect Password Manager data and embedded privileges.
  • Use of Encryption:
    Use of Encryption to protect sensitive user data in storage and transit.
  • Web Form Input Protection:
    Inputs to web forms in Password Manager are automatically protected against bogus data, buffer overruns and more.
page top page top