← Back to Baseline

MB-R278

HUMAN VERIFICATION REQUIRED ASVS 1.5.3 Consistent parser behavior

MB-C18 ASVS Level 3 Human Assurance Medium

Different parsers used in the application for the same data type (e.g., JSON parsers, XML parsers, URL parsers), perform parsing in a consistent way and use the same character encoding mechanism to avoid issues such as JSON Interoperability vulnerabilities or different URI or file parsing behavior being exploited in Remote File Inclusion (RFI) or Server-side Request Forgery (SSRF) attacks.