OWASPASVS 5.0 requirement
ASVS-V15.3.5 The application explicitly ensures that variables are of the correct type and performs strict equality and comparator operations.
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.3 Defensive Coding
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application explicitly ensures that variables are of the correct type and performs strict equality and comparator operations. This is to avoid type juggling or type confusion vulnerabilities caused by the application code making an assumption about a variable type.