Skip to content

Commit

Permalink
tag fix for #2223
Browse files Browse the repository at this point in the history
removed requirement:
V12.3.6 Verify that the application does not include and execute functionality from untrusted sources, such as unverified content distribution networks, JavaScript libraries, node npm libraries, or server-side DLLs. | | ✓ | ✓ | 829 |

With duplicate of we should point to v4.0.3 requirements:
* V14.2.3 Verify that if application assets, such as JavaScript libraries, CSS or web fonts, are hosted externally on a Content Delivery Network (CDN) or external provider, Subresource Integrity (SRI) is used to validate the integrity of the asset.
* V14.2.4 Verify that third party components come from pre-defined, trusted and continually maintained repositories.
  • Loading branch information
elarlang authored and tghosth committed Nov 5, 2024
1 parent e14a915 commit f9020c0
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion 5.0/en/0x20-V12-Files-Resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ File operations should not rely on user-submitted filenames or metadata to avoid
| **12.3.3** | [DELETED, MERGED TO 12.3.1] | | | | |
| **12.3.4** | [MOVED TO 12.5.3] | | | | |
| **12.3.5** | [DELETED, DUPLICATE OF 5.3.8] | | | | |
| **12.3.6** | [DELETED, DUPLICATE OF 50.6.1] | | | | |
| **12.3.6** | [DELETED, DUPLICATE OF 14.2.4] | | | | |
| **12.3.7** | [ADDED] Verify that server-side file processing such as file decompression ignores user-provided path information to prevent vulnerabilities such as zip slip. |||| 23 |

## V12.4 File Storage
Expand Down

0 comments on commit f9020c0

Please sign in to comment.