Security and Sanitization

← All categories

• Q215: How does the 'sanitized' parameter modifier work in EK9?
• Q216: How does EK9 detect and report security threats?
• Q217: How do sanitized parameters interact with pure functions in EK9?
• Q218: What are the security best practices in EK9?
• Q268: How does EK9 prevent common security vulnerabilities?
• Q269: How does EK9 handle input validation?
• Q270: How does supply chain security work in EK9?
• Q271: How do I handle secrets and environment configuration?
• Q272: How do I build defense in depth in EK9?
• Q273: How does purity create security boundaries?
• Q661: Why can sanitized only be used on incoming String parameters?
• Q662: How do I safely work with sanitized parameters without aliasing?
• Q663: Why must sanitized match exactly in overridden methods?
• Q664: Why are ++ and -- statement-only operators in EK9?
• Q665: How do sanitized parameters work with web service content binding?
• Q686: How must sanitized modifiers match between parent and override methods?
• Q701: What is the Sensitive type in EK9?
• Q702: How do I load secrets from environment variables in EK9?
• Q703: How do I access the raw value of a Sensitive in EK9?
• Q704: How does EK9 detect hardcoded secrets at compile time?
• Q705: How do I migrate from hardcoded secrets to secure patterns in EK9?
• Q706: How do I use credentials, URLs, usernames and passwords or tokens to connect to databases or services?
• Q847: Where can the sanitized modifier be used in EK9?
• Q950: Where can the 'sanitized' keyword NOT be used in EK9?
• Q1015: In Python I use parameterised queries to prevent SQL injection. How does EK9 handle input sanitisation?
• Q1016: In Python I load database passwords from environment variables. How does EK9 handle credentials and secrets?
• Q1237: Write me a pure function that takes a sanitized String parameter and returns a different status string for safe input versus blocked malicious input.
• Q1241: Create me a constrained EmailAddress type as String validated by a regex, then write a registerUser function that uses a guard expression to accept only valid emails.
• Q1246: Create me an AuditLogger class whose constructor takes a sanitized String log message, where construction with malicious input (file paths, terminal escape sequences, traceback fragments) leaves the logger in a 'rejected' state.
• Q1247: Write me a QueryBuilder class with an addClause method that takes a sanitized String fragment, returning 'accepted' for clean fragments and 'rejected' for malicious ones (URL injection, LDAP injection, NoSQL operator injection).
• Q1332: Why can't I mark a captured variable as 'sanitized' in a dynamic function?
• Q1370: Why does reading a file with TextFile.input() give me unset lines?