ASVS Requirement 1.2.8
- Level: 2
- Chapter: V1 Encoding and Sanitization
- Section: V1.2 Injection Prevention
- Source: 0x10-V1-Encoding-and-Sanitization.md
Description
Verify that LaTeX processors are configured securely (such as not using the "--shell-escape" flag) and an allowlist of commands is used to prevent LaTeX injection attacks.