OWASPASVS 5.0 requirement
ASVS-V2.1.1 The application's documentation defines input validation rules for how to check the validity of data items against an expected structure.
- Standard
- OWASP ASVS 5.0
- Chapter
- V2 Validation and Business Logic
- Section
- V2.1 Validation and Business Logic Documentation
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application's documentation defines input validation rules for how to check the validity of data items against an expected structure. This could be common data formats such as credit card numbers, email addresses, telephone numbers, or it could be an internal data format.