OWASPASVS 5.0 requirement
ASVS-V4.2.2 When generating http messages, the content-length header field does not conflict with the length of the content as determined by the…
- Standard
- OWASP ASVS 5.0
- Chapter
- V4 API and Web Service
- Section
- V4.2 HTTP Message Structure Validation
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that when generating HTTP messages, the Content-Length header field does not conflict with the length of the content as determined by the framing of the HTTP protocol, in order to prevent request smuggling attacks.