OWASPASVS 5.0 requirement
ASVS-V1.2.1 Output encoding for an http response, html document, or xml document is relevant for the context required, such as encoding the relevant…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.2 Injection Prevention
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that output encoding for an HTTP response, HTML document, or XML document is relevant for the context required, such as encoding the relevant characters for HTML elements, HTML attributes, HTML comments, CSS, or HTTP header fields, to avoid changing the message or document structure.