rspec/rules/S6363/recommended.adoc
2023-01-09 15:29:41 +01:00

7 lines
288 B
Plaintext

== Recommended Secure Coding Practices
It is recommended to disable access to local files for WebViews unless it is
necessary. In the case of a successful attack through a Cross-Site Scripting
vulnerability the attackers attack surface decreases drastically if no files
can be read out.