OWASPASVS 5.0 requirement
ASVS-V1.1.1 Input is decoded or unescaped into a canonical form only once, it is only decoded when encoded data in that form is expected, and that this…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.1 Encoding and Sanitization Architecture
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that input is decoded or unescaped into a canonical form only once, it is only decoded when encoded data in that form is expected, and that this is done before processing the input further, for example it is not performed after input validation or sanitization.