ASVS Requirement 1.2.3
- Level: 1
- Chapter: V1 Encoding and Sanitization
- Section: V1.2 Injection Prevention
- Source: 0x10-V1-Encoding-and-Sanitization.md
Description
Verify that output encoding or escaping is used when dynamically building JavaScript content (including JSON), to avoid changing the message or document structure (to avoid JavaScript and JSON injection).