+APP.1.2.A1 Use of Basic Security Mechanisms (B)

APP.1.2.A1 Use of Basic Security Mechanisms (B)

Any web browser used MUST ensure that every instance and process can only access its own resources (sandboxing). Webpages MUST be isolated from each other in independent processes, or at least in their own threads. Plug-ins and extensions MUST also be executed in isolated areas.

Any web browser used MUST implement the Content Security Policy (CSP). The current highest level of the CSP SHOULD be met.

Browsers MUST support same-origin policy and subresource integrity safeguards.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware