OWASPASVS 5.0 requirement
ASVS-V15.3.6 Javascript code is written in a way that prevents prototype pollution, for example, by using set() or map() instead of object literals.
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.3 Defensive Coding
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that JavaScript code is written in a way that prevents prototype pollution, for example, by using Set() or Map() instead of object literals.