OWASPASVS 5.0 requirement

ASVS-V1.3.8 The application appropriately sanitizes untrusted input before use in java naming and directory interface (jndi) queries and that jndi is…

L2 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V1 Encoding and Sanitization
Section: V1.3 Sanitization
Level: L2 (requirement applies from this verification level up)

Requirement

Verify that the application appropriately sanitizes untrusted input before use in Java Naming and Directory Interface (JNDI) queries and that JNDI is configured securely to prevent JNDI injection attacks.