OWASPASVS 5.0 requirement
ASVS-V1.3.4 User-supplied scalable vector graphics (svg) scriptable content is validated or sanitized to contain only tags and attributes (such as draw…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.3 Sanitization
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that user-supplied Scalable Vector Graphics (SVG) scriptable content is validated or sanitized to contain only tags and attributes (such as draw graphics) that are safe for the application, e.g., do not contain scripts and foreignObject.