OWASPASVS 5.0 requirement

ASVS-V1.2.5 The application protects against os command injection and that operating system calls use parameterized os queries or use contextual…

L1 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V1 Encoding and Sanitization
Section
V1.2 Injection Prevention
Level
L1 (requirement applies from this verification level up)

Requirement

Verify that the application protects against OS command injection and that operating system calls use parameterized OS queries or use contextual command line output encoding.