OWASPASVS 5.0 requirement

ASVS-V3.2.3 The application avoids dom clobbering when using client-side javascript by employing explicit variable declarations, performing strict type…

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V3 Web Frontend Security
Section
V3.2 Unintended Content Interpretation
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that the application avoids DOM clobbering when using client-side JavaScript by employing explicit variable declarations, performing strict type checking, avoiding storing global variables on the document object, and implementing namespace isolation.