OWASPASVS 5.0 requirement

ASVS-V5.2.6 The application rejects uploaded images with a pixel size larger than the maximum allowed, to prevent pixel flood attacks.

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V5 File Handling
Section
V5.2 File Upload and Content
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that the application rejects uploaded images with a pixel size larger than the maximum allowed, to prevent pixel flood attacks.