Web Form Input Protection
Hitachi ID Management Suite CGI programs, which display and process all user interfaces and web services, use a special string library to validate all input before processing. This includes checking maximum input variable length, filtering out special characters and HTML codes, checking for valid formatting and value ranges, etc.
Use of a standard approach to filtering all inputs prevents buffer overrun, cross-site scripting and similar attacks throughout the application.