What is the exact name of the function used to guard against log injection attacks?

What is the exact name of the function used to guard against log injection attacks?

• A. validate()
• B. sanitize()
• C. escape()
• D. filter()

Answer: (A)

Guarding against log injection hinges on ensuring that what gets written to logs is safe and exactly what you expect to record. Using a function named to validate input embodies this approach: it checks that the data conforms to a defined, safe pattern and rejects or handles anything outside those rules. By validating the input before logging, you prevent characters or sequences that could alter the log’s structure, such as control characters or newlines, from slipping in. This upfront check is the most direct way to enforce that only safe content makes it into log files. Sanitizing would remove or neutralize dangerous content after it’s seen, escaping would encode characters to prevent interpretation at the point of use, and filtering would apply rules to allow or deny data, but none conveys the same explicit upfront enforcement as validation.

Guarding against log injection hinges on ensuring that what gets written to logs is safe and exactly what you expect to record. Using a function named to validate input embodies this approach: it checks that the data conforms to a defined, safe pattern and rejects or handles anything outside those rules. By validating the input before logging, you prevent characters or sequences that could alter the log’s structure, such as control characters or newlines, from slipping in. This upfront check is the most direct way to enforce that only safe content makes it into log files.

Sanitizing would remove or neutralize dangerous content after it’s seen, escaping would encode characters to prevent interpretation at the point of use, and filtering would apply rules to allow or deny data, but none conveys the same explicit upfront enforcement as validation.