OWASPASVS 5.0 requirement

ASVS-V5.1.1 The documentation defines the permitted file types, expected file extensions, and maximum size (including unpacked size) for each upload…

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V5 File Handling
Section
V5.1 File Handling Documentation
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that the documentation defines the permitted file types, expected file extensions, and maximum size (including unpacked size) for each upload feature. Additionally, ensure that the documentation specifies how files are made safe for end-users to download and process, such as how the application behaves when a malicious file is detected.