Intermediate
Input Validation and OWASP ASVS
Map ASVS Level 2 controls to validation libraries, schema design, and API error contracts.
Overview
You refactor sample APIs with Zod and OpenAPI generators, then stress-test them with fuzz cases tuned for multilingual payloads. Includes reviewer rubric for code reviews.
Duration: 4 weeks · 28 hours · Format: Hybrid · Language: English · Certificate: Included
Price (informational): ¥68,000
What is included
- ASVS control spreadsheet with engineering owners
- Mutation testing hooks for validation branches
- Fuzz corpus with Japanese character edge cases
- Error shape guidelines that play nice with mobile clients
- Office hour on balancing strictness vs UX
Outcomes
- Adopt a validation strategy documented in ADR format
- Reduce high-risk input classes in a sample service by 80%
- Run a peer review using the supplied rubric
Lead mentor
Aya Morimoto
Quality coach who pairs ASVS language with everyday pull request comments.
FAQ
Examples use TypeScript; JVM and Go equivalents are discussed in annex notes.
Experience notes
Fuzz lab exposed a normalization bug we had blamed on mobile keyboards for months.
Theo · 5/5 · survey