OWASPASVS 5.0 requirement

ASVS-V14.2.8 Sensitive information is removed from the metadata of user-submitted files unless storage is consented to by the user.

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V14 Data Protection
Section
V14.2 General Data Protection
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that sensitive information is removed from the metadata of user-submitted files unless storage is consented to by the user.