OWASPASVS 5.0 requirement
ASVS-V5.4.2 File names served (e.g., in http response header fields or email attachments) are encoded or sanitized (e.g., following rfc 6266) to…
- Standard
- OWASP ASVS 5.0
- Chapter
- V5 File Handling
- Section
- V5.4 File Download
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that file names served (e.g., in HTTP response header fields or email attachments) are encoded or sanitized (e.g., following RFC 6266) to preserve document structure and prevent injection attacks.