Input Validation

TOS validates data in many fields in SecureTrack and SecureChange such as user names and email addresses. If a field contains invalid information, you will not be able to create or modify the field until the invalid information has been corrected.

Field Requirement Max characters

Access Type

Support only the following values: allow only, block only, allow all, block all

Tip: Restrict using enum.

N/A

Description

Should not contain:

  • XML or programming language tags such as <SCRIPT>

  • HTML attributes such as <div attr="...>

500

Destination

Standard characters, including digits 0-9, the following special characters: . - and cannot start or end with a dash (-)

63

Domain

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

Tip: Use the same pattern as for Zone Name in SecureTrack.

255

Email (SecureChange)

Standard email address format ([email protected]).

  • Username supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # / = ! ^ $ * ?

  • Domain is a list of dot-separated DNS labels. Each label consisting of uppercase and lowercase Latin characters (A-Z and a-z), digits 0-9 provided that top-level domain name is not all-numeric, and hyphen (-), provided that a hyphen is not the first or last character.

255

Export Reports, User Name (SecureTrack)

Standard Unix user name format; standard characters, including digits 0-9, and the following special characters: _ -

32

First Name and Last Name (SecureChange)

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

255

Flows

Can be empty or one of the following values: HOST_TO_HOST, SUBNET_TO_HOST, HOST_TO_SUBNET

Tip: Restrict using enum.

N/A

New Object Service Comment (SecureTrack)

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

Cannot contain HTML code, JavaScript elements, XML, or programming language tags.

255

New Object Service Name (SecureTrack)

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

63

New Object Source or Destination Comment (SecureTrack)

Cannot contain HTML code, JavaScript elements, XML, or programming language tags.

255

Notes

Should not contain:

  • XML or programming language tags such as <SCRIPT>
  • HTML attributes, such as <div attr="...>
  • JavaScript URLs, such as http://example.org/foo.html?redirect
4096

Password

Cannot contain spaces

128

Phone (SecureChange)

Standard phone number format. For details, see RFC 3966. Cannot contain alphabetic characters corresponding to digits.

31

Root URL in Host

Standard characters, including digits 0-9, the following special characters: = ! ^ + @ # $ % & * + and must start with a /

 

Rule Properties

List of properties separated by a ';'.

Note: Do not use { } characters.

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

255

Services/Applications

List of services/applications separated by a ';'.

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

255

Severity

Support only the following values: critical, high, medium, low

Tip: Restrict using enum.

N/A

Ticket subject (SecureChange)

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

255

TicURLs

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

255

User Email address (SecureTrack)

Standard email address format ([email protected]).

  • Username supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # / = ! ^ $ * ?

  • Domain is a list of dot-separated DNS labels. Each label consisting of uppercase and lowercase Latin characters (A-Z and a-z), digits 0-9 provided that top-level domain name is not all-numeric, and hyphen (-), provided that a hyphen is not the first or last character.

255

User First Name and Last Name (SecureTrack)

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

255

User Name (SecureChange)

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

63

Workflow Description (SecureChange)

Should not contain:

  • XML or programming language tags such as <SCRIPT>
  • HTML attributes, such as <div attr="...>
  • JavaScript URLs, such as http://example.org/foo.html?redirect

4096

Workflow Property First Name, and Last Name (SecureChange)

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

255

Zone Names (SecureTrack)

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

255

Zone Patterns

Supports standard characters in all Unicode-supported languages, including digits 0-9, and the following special characters: + - _ # @ . : / = ! ^ ( ) , [space]

Tip: Use the same pattern as for Zone Name in SecureTrack.