OWASPASVS 5.0 requirement

ASVS-V5.4.1 The application validates or ignores user-submitted filenames, including in a json, jsonp, or url parameter and specifies a filename in the…

L2 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V5 File Handling
Section: V5.4 File Download
Level: L2 (requirement applies from this verification level up)

Requirement

Verify that the application validates or ignores user-submitted filenames, including in a JSON, JSONP, or URL parameter and specifies a filename in the Content-Disposition header field in the response.