OWASPASVS 5.0 requirement
ASVS-V1.5.1 The application configures xml parsers to use a restrictive configuration and that unsafe features such as resolving external entities are…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.5 Safe Deserialization
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application configures XML parsers to use a restrictive configuration and that unsafe features such as resolving external entities are disabled to prevent XML eXternal Entity (XXE) attacks.