OWASPASVS 5.0 requirement
ASVS-V13.4.7 The web tier is configured to only serve files with specific file extensions to prevent unintentional information, configuration, and…
- Standard
- OWASP ASVS 5.0
- Chapter
- V13 Configuration
- Section
- V13.4 Unintended Information Leakage
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the web tier is configured to only serve files with specific file extensions to prevent unintentional information, configuration, and source code leakage.