Forms and input validation

13 procedures covering client validation against server validation, field length boundaries, unicode emoji and combining characters in a field, paste and autofill, required fields and an empty submit. Out of scope here: form visual design, copywriting of error text, injection and penetration testing of input.

Rules and Constraints

Input Behaviour

Submit and State

Enforcement

Checklists

Questions people ask about this area