Question

A network automation web service accepts a VLAN name and VLAN ID from an untrusted user-submitted form, then constructs a RESTCONF PATCH payload sent to IOS-XE devices. During a security review, a colleague notes that the current code inserts the raw VLAN ID and name directly into the JSON string and the request URL. Which input validation change most effectively reduces the risk of malformed or malicious data reaching the device?

Accepted Answer

Enforce a server-side allowlist check that the VLAN ID is an integer within 1-4094 and the name matches a strict character pattern before building the payload with a JSON serializer

Answer

Rely on the front-end JavaScript form validation to reject bad input before the request is submitted to the backend

Answer

Wrap the RESTCONF call in a try/except block and log any 400 responses returned by the device

Answer

URL-encode the entire JSON payload body before sending it in the PATCH request