SID-HARD-02 — Input Validation and Injection Prevention

Property	Value
Status	verified
Owner	platform
Category	technical
CSF Function	protect
Group	System Hardening Controls

Description

Comprehensive validation: DID syntax per W3C DID Core 1.0 (rejects null/newline/traversal). HTTP body size limits (io.LimitReader): 10MB general, 1MB JWKS, 64KB errors. WebSocket 64KB read limit. SVG sanitization. Policy constraint injection prevention via structured types. URL redirect validation.

Components

• Wallet Backend (Go)
• Trust Service (AuthZEN)
• Wallet Frontend

Source References

• go-trust/didutil.go

Audit Findings

Finding	Severity	Status
EN-P-7 — Partial hardening and error handling	medium	resolved