OWASPASVS 5.0 requirement
ASVS-V1.2.7 The application is protected against xpath injection attacks by using query parameterization or precompiled queries.
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.2 Injection Prevention
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application is protected against XPath injection attacks by using query parameterization or precompiled queries.