OWASPASVS 5.0 requirement
ASVS-V1.3.6 The application protects against server-side request forgery (ssrf) attacks, by validating untrusted data against an allowlist of…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.3 Sanitization
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application protects against Server-side Request Forgery (SSRF) attacks, by validating untrusted data against an allowlist of protocols, domains, paths and ports and sanitizing potentially dangerous characters before using the data to call another service.