OWASPASVS 5.0 requirement
ASVS-V5.2.3 The application checks compressed files (e.g., zip, gz, docx, odt) against maximum allowed uncompressed size and against maximum number of…
- Standard
- OWASP ASVS 5.0
- Chapter
- V5 File Handling
- Section
- V5.2 File Upload and Content
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application checks compressed files (e.g., zip, gz, docx, odt) against maximum allowed uncompressed size and against maximum number of files before uncompressing the file.