OWASPASVS 5.0 requirement
ASVS-V1.3.2 The application avoids the use of eval() or other dynamic code execution features such as spring expression language (spel).
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.3 Sanitization
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application avoids the use of eval() or other dynamic code execution features such as Spring Expression Language (SpEL). Where there is no alternative, any user input being included must be sanitized before being executed.