OWASPASVS 5.0 requirement
ASVS-V1.2.8 Latex processors are configured securely (such as not using the "--shell-escape" flag) and an allowlist of commands is used to prevent…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.2 Injection Prevention
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that LaTeX processors are configured securely (such as not using the "--shell-escape" flag) and an allowlist of commands is used to prevent LaTeX injection attacks.