OWASPASVS 5.0 requirement
ASVS-V5.2.5 The application does not allow uploading compressed files containing symlinks unless this is specifically required (in which case it will…
- Standard
- OWASP ASVS 5.0
- Chapter
- V5 File Handling
- Section
- V5.2 File Upload and Content
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the application does not allow uploading compressed files containing symlinks unless this is specifically required (in which case it will be necessary to enforce an allowlist of the files that can be symlinked to).