OWASP Annotated Application Security Verification Standard
latest

Browse by chapter:

  • 1 Architecture, Design and Threat Modeling
  • 2 Authentication
  • 3 Session Management
  • 4 Access Control
  • 5 Validation, Sanitization and Encoding
  • 6 Stored Cryptography
  • 7 Error Handling and Logging
  • 8 Data Protection
  • 9 Communications
  • 10 Malicious Code
  • 11 Business Logic
  • 12 Files and Resources
    • 12.1 File Upload Requirements
    • 12.2 File Integrity Requirements
    • 12.3 File execution Requirements
      • 12.3.1 User-submitted filename metadata is not used
      • 12.3.2 User-submitted filename metadata is validated or ignored to prevent LFI
      • 12.3.3 User-submitted filename metadata is validated or ignored to prevent RFI
      • 12.3.4 The application protects against reflective file download
      • 12.3.5 Untrusted file metadata is not used
      • 12.3.6 TODO
    • 12.4 File Storage Requirements
    • 12.5 File Download Requirements
    • 12.6 SSRF Protection Requirements
  • 13 API and Web Service
  • 14 Configuration
OWASP Annotated Application Security Verification Standard
  • Docs »
  • 12 Files and Resources »
  • 12.3 File execution Requirements

12.3 File execution RequirementsΒΆ

Browse by item:

  • 12.3.1 User-submitted filename metadata is not used
  • 12.3.2 User-submitted filename metadata is validated or ignored to prevent LFI
  • 12.3.3 User-submitted filename metadata is validated or ignored to prevent RFI
  • 12.3.4 The application protects against reflective file download
  • 12.3.5 Untrusted file metadata is not used
  • 12.3.6 TODO
Next Previous

© Copyright 2019 Wessel van der Linden Revision 63d1bede.

Built with Sphinx using a theme provided by Read the Docs.