OWASPASVS 5.0 requirement
ASVS-V1.3.5 The application sanitizes or disables user-supplied scriptable or expression template language content, such as markdown, css or xsl…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.3 Sanitization
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application sanitizes or disables user-supplied scriptable or expression template language content, such as Markdown, CSS or XSL stylesheets, BBCode, or similar.