OWASPASVS 5.0 requirement
ASVS-V1.5.3 Different parsers used in the application for the same data type (e.g., json parsers, xml parsers, url parsers), perform parsing in a…
- Standard
- OWASP ASVS 5.0
- Chapter
- V1 Encoding and Sanitization
- Section
- V1.5 Safe Deserialization
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that different parsers used in the application for the same data type (e.g., JSON parsers, XML parsers, URL parsers), perform parsing in a consistent way and use the same character encoding mechanism to avoid issues such as JSON Interoperability vulnerabilities or different URI or file parsing behavior being exploited in Remote File Inclusion (RFI) or Server-side Request Forgery (SSRF) attacks.