OWASPASVS 5.0 requirement
ASVS-V3.2.2 Content intended to be displayed as text, rather than rendered as html, is handled using safe rendering functions (such as createtextnode…
- Standard
- OWASP ASVS 5.0
- Chapter
- V3 Web Frontend Security
- Section
- V3.2 Unintended Content Interpretation
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that content intended to be displayed as text, rather than rendered as HTML, is handled using safe rendering functions (such as createTextNode or textContent) to prevent unintended execution of content such as HTML or JavaScript.