Do you need additional actions for security on incoming form (API) data, other than those that already exist by default (Type in Entity)?

Question

symfony

Data comes from the form through the JSON-API, to put it in the database, and then display it.

Can you please tell me if Symfony somehow filters them? Well, how is it done in PDO?

Do you need to do something with them additionally, besides what is already there (indication of the type in the model / entity)?

And if so, what exactly?

Answer 1

In theory, specifying scalar types at the php level and mapping the doctrine should be enough, you can specify Type validation in order to catch mismatches or validate non-scalar types using the symphony tools.
You can also do this article (I think this is the most correct option)
How to validate raw values