Application Security
ASVS 5.0 V1.2.6: Prevent LDAP Injection
ASVS V1.2.6 requires protection against LDAP injection. Escape filter and DN values with the right encoder and test your login search for filter breakout.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
ASVS 5.0 V1.2.5: Stop OS Command Injection
ASVS V1.2.5 requires parameterized OS calls or contextual output encoding. Learn to replace shell strings with argument arrays and verify with real tests.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V1.2.4: Use Parameterized Queries Everywhere
ASVS V1.2.4 requires parameterized queries or an ORM for SQL, HQL, NoSQL and Cypher. See safe code in four stacks, tests, and the mistakes that still cause injection.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V1.2.3: Prevent JavaScript and JSON Injection
ASVS V1.2.3 requires encoding when you build JavaScript or JSON dynamically. Learn why string concatenation fails and how to embed data safely.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V1.2.2: Build URLs Safely and Block Bad Schemes
ASVS V1.2.2 requires URL encoding of untrusted values and an allowlist of protocols. See code to block javascript: and data: links and how to test it.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V1.2.10: Defend Against CSV Formula Injection
ASVS V1.2.10 requires escaping CSV fields per RFC 4180 and neutralizing leading formula characters. See an export function and how to test spreadsheets.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V1.2.1: Encode Output for Its Context
ASVS V1.2.1 requires output encoding that matches HTML body, attribute, comment, CSS or header context. See working code for each and how to test for gaps.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V1.1.2: Encode Output as the Last Step
ASVS V1.1.2 wants output encoding applied right before data reaches its interpreter, or by the interpreter itself. Learn how to place it and test it.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V1.1.1: Decode Input Once Before Validation
ASVS V1.1.1 says decode input to canonical form exactly once, before validation. Here is how double decoding breaks filters, and how to implement and test it.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.