DataTables Server-Side Processing: The Request/Response Contract and How to Implement It Safely
How DataTables server-side processing actually works: the request parameters, the draw/recordsTotal/recordsFiltered response contract, safe sorting whitelists, and a local test setup to verify it.