Skip to content

Commit

Permalink
Update to 12.2.1 to resolve #1291 (#2009)
Browse files Browse the repository at this point in the history
  • Loading branch information
jmanico committed Aug 6, 2024
1 parent 274b4ca commit 72406ad
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion 5.0/en/0x20-V12-Files-Resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ Although zip bombs can be effectively tested using penetration testing technique

| # | Description | L1 | L2 | L3 | CWE |
| :---: | :--- | :---: | :---: | :---: | :---: |
| **12.2.1** | [MODIFIED] Verify that when the application is accepting a file, it checks that the file extension of the file matches an expected file extension and that it validates that the contents of the file match the type represented by that extension, including but not limited to checking the initial "magic bytes". | ||| 434 |
| **12.2.1** | [MODIFIED] Verify that when the application accepts a file, it checks if the file extension matches an expected file extension and validates that the contents correspond to the type represented by the extension. This includes, but is not limited to, checking the initial 'magic bytes', performing image re-writing, and using specialized libraries for file content validation. | ||| 434 |
| **12.2.2** | [ADDED] Verify that the application blocks uploaded images with a pixel size larger than the maximum allowed, to prevent pixel flood attacks. |||| 400 |

## V12.3 File Execution
Expand Down

0 comments on commit 72406ad

Please sign in to comment.