OWASPASVS 5.0 requirement
ASVS-V5.1.1 The documentation defines the permitted file types, expected file extensions, and maximum size (including unpacked size) for each upload…
- Standard
- OWASP ASVS 5.0
- Chapter
- V5 File Handling
- Section
- V5.1 File Handling Documentation
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the documentation defines the permitted file types, expected file extensions, and maximum size (including unpacked size) for each upload feature. Additionally, ensure that the documentation specifies how files are made safe for end-users to download and process, such as how the application behaves when a malicious file is detected.