Which secure coding best practice says to require authentication before allowing any files to be...

The secure coding best practice that requires authentication before allowing any files to be uploaded, and limits the types of files to only those needed for the business purpose, falls under the category of File Management. This practice is crucial for preventing unauthorized file uploads, which can be a common vector for attacks such as uploading malicious files or scripts. By enforcing authentication, the application ensures that only legitimate users can upload files. Additionally, restricting the file types to those necessary for business operations minimizes the risk of uploading potentially harmful files that could compromise the system.

References:

OWASP Secure Coding Practices1

File Upload Security Best Practices | CodeHandbook2

File Upload Protection – 10 Best Practices for Preventing … - OPSWAT3