ASP.NET Misconfiguration: Not Using Input Validation Framework

Phase: Architecture and Design

• Phone number fields contain only valid characters in phone numbers
• Boolean values are only "T" or "F"
• Free-form strings are of a reasonable length and composition