ASVS Requirement 15.3.5
- Level: 2
- Chapter: V15 Secure Coding and Architecture
- Section: V15.3 Defensive Coding
- Source: 0x24-V15-Secure-Coding-and-Architecture.md
Description
Verify that the application explicitly ensures that variables are of the correct type and performs strict equality and comparator operations. This is to avoid type juggling or type confusion vulnerabilities caused by the application code making an assumption about a variable type.