OWASPASVS 5.0 requirement
ASVS-V15.3.1 The application only returns the required subset of fields from a data object.
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.3 Defensive Coding
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application only returns the required subset of fields from a data object. For example, it should not return an entire data object, as some individual fields should not be accessible to users.