OWASPASVS 5.0 requirement
ASVS-V1.3.7 The application protects against template injection attacks by not allowing templates to be built based on untrusted input.
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.3 Sanitization
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application protects against template injection attacks by not allowing templates to be built based on untrusted input. Where there is no alternative, any untrusted input being included dynamically during template creation must be sanitized or strictly validated.