OWASPASVS 5.0 requirement
ASVS-V1.2.4 Data selection or database queries (e.g., sql, hql, nosql, cypher) use parameterized queries, orms, entity frameworks, or are otherwise…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.2 Injection Prevention
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that data selection or database queries (e.g., SQL, HQL, NoSQL, Cypher) use parameterized queries, ORMs, entity frameworks, or are otherwise protected from SQL Injection and other database injection attacks. This is also relevant when writing stored procedures.