2 min read
What it is
Input validation is the server’s check that a request meets its constraints before acting on it — correct types, bounded lengths, allowed values, mandatory fields. On an unauthenticated surface it does much of the work a credential would otherwise do.
On the public ring
The public ring validates strictly. An enquiry’s fields must be a flat object of ≤60 keys and ≤16 KiB, a present email must be valid, and consent must equal "yes". A failure returns 422 with a stable error code. Mirror these rules client-side for a better experience, but the server is always the final authority. See validate before you post.
Frequently asked questions
Can I skip validation if I check client-side?
No. The server re-validates every request regardless. Client checks improve UX; they are not a substitute for server enforcement.
Funding for UK limited companies
Credicorp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.