OWASPASVS 5.0 requirement
ASVS-V1.3.12 Regular expressions are free from elements causing exponential backtracking, and ensure untrusted input is sanitized to mitigate redos or…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.3 Sanitization
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that regular expressions are free from elements causing exponential backtracking, and ensure untrusted input is sanitized to mitigate ReDoS or Runaway Regex attacks.