OWASPASVS 5.0 requirement
ASVS-V2.2.2 The application is designed to enforce input validation at a trusted service layer.
- Standard
- OWASP ASVS 5.0
- Chapter
- V2 Validation and Business Logic
- Section
- V2.2 Input Validation
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application is designed to enforce input validation at a trusted service layer. While client-side validation improves usability and should be encouraged, it must not be relied upon as a security control.