OWASPASVS 5.0 requirement
ASVS-V1.2.3 Output encoding or escaping is used when dynamically building javascript content (including json), to avoid changing the message or…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.2 Injection Prevention
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that output encoding or escaping is used when dynamically building JavaScript content (including JSON), to avoid changing the message or document structure (to avoid JavaScript and JSON injection).