WEB-11
Output Encoding
Description
Mechanisms exist to ensure output encoding is performed on all content produced by a web application to reduce the likelihood of cross-site scripting and other injection attacks.
Control Question
Does the organization ensure output encoding is performed on all content produced by a web application to reduce the likelihood of cross-site scripting and other injection attacks?
Control Metadata
Domain:
Web Security
Validation Cadence:
Annual