[cvas22]

Summary :

Closes #189

Updates the four ASVS pages to ASVS 5.0.0. The chapter list now has the 17 v5 chapters (V1 Encoding and Sanitization through V17 WebRTC) instead of the 14 from 4.0.3, and the links point at the v5.0.0 branch. The Level 1 description no longer says those applications are completely penetration testable, since ASVS 5.0 says level 1 is not necessarily penetration testable from outside and describes it as the minimum, around 20% of the requirements. The requirement count is now "around 350" for 5.0.0.

@cronchie it looks like you took this on back in March. I'm happy to hand it back or fold in anything you have, and could I be assigned if not?

Description for the changelog :

Update the ASVS pages to ASVS version 5.0

Declaration:

Thanks for submitting a pull request, please make sure:

• content meets the license for this project
• you have read the contribution guide
  and agree to the Code of Conduct
• either no AI-generated content has been used in this pull request
• or any use of AI
  in this pull request has been disclosed below:

This PR was done with the help of Claude with Opus 5.5. Output was human edited, reviewed, and deemed fit to finalize PR.

Other info :

Chapter names and file names are taken from the v5.0.0 branch of the ASVS repo, and the level text from its "What is the ASVS" page. I checked that every new link resolves.

[jgadsden]

Hello @cvas22 , could you be sure to read the contribution guide and the Code of Conduct, in particular the use of generative AI

[cvas22]

@jgadsden Yes, I read it. Please give me some time to complete the PR (it's draft now). AFAIK, we're allowed to use it.

although the use of generative AI is not prohibited, it must be declared in the pull request

[cvas22]

@jgadsden Updated PR in accordance with the guidelines under contributing. All content was human reviewed, human edited, and human checked to ensure it does what it claims it does in an efficient manner to be considerate towards everyone's time and efforts. Please leave a message if you'd like anything else from me. Thx.

[jgadsden]

Hello @cvas22 , version 5 of the ASVS has significant and fundamental changes and this goes beyond the changes in the section headers

as such this pull request does not fulfil #189 , and also the contributors guidelines clearly state:
"you must be assigned the issue before submitting a pull request" which is not the case here

There are multiple reason for following the guidelines, and here it would have allowed the maintainers to describe what needs to change in the ASVS pages

[cvas22]

@jgadsden Couple of points.

There is no update on the issue from 8+ months.
There is no update from @cronchie either.
No one has offered to help so far.
The ask is straightforward enough.

I think at this point, it's fair that someone else takes on the baton. I'll let you decide. Thank you.