← Back to Baseline

MB-R302

HUMAN VERIFICATION REQUIRED ASVS 5.3.3 Ignore archive paths (when file_handling is used)

MB-C18 ASVS Level 3 Human Assurance Medium

Server-side file processing, such as file decompression, ignores user-provided path information to prevent vulnerabilities such as zip slip.