OWASPASVS 5.0 requirement
ASVS-V1.3.1 All untrusted html input from wysiwyg editors or similar is sanitized using a well-known and secure html sanitization library or framework…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.3 Sanitization
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that all untrusted HTML input from WYSIWYG editors or similar is sanitized using a well-known and secure HTML sanitization library or framework feature.