The file and resources category ensures applications handle untrusted file data securely and store untrusted data from untrusted sources with limited permissions in an appropriate location.

This includes controls such as avoiding denial of service through large or unexpected file types, validating file type and preventing against path traversal.