TS · security

←Previous Next→

require-zod-form-validation

Require Zod validation (Schema.parse(...) / Schema.safeParse(...)) when reading values out of a FormData object.

missingZodValidation Rule source Tests Catalog JSON

Why

FormData values are untrusted strings or files and need runtime validation before use.

Fix

Read the value inside a Zod schema's parse or safeParse input.

Examples

Before — flagged Do not use a raw form value

src/action.ts

const name = formData.get("name");

After — preferred Validate the form value

src/action.ts

const input = UserSchema.parse({ name: formData.get("name") });