Alfresco Default Security

[psk]

Hi everyone, i'm quite new to Alfresco, i'd like to know something about default security implementation. So i'm looking for infos about how Alfresco handle default input validation, cross site scripting or injections.
Is there someone who can help me about it?

thanks

psk

[mrogers]

What in particular are you concerned with? 

XSS atacks are generally prevented by making sure text is always "encoded" correcty.    Likewise SQL injection attacks.

And "input validation" is a broad subject but the high level view is that you can define models in alfresco and then user input will be validated against the constraints defined by those models.