+CON.10.A15 Prevention of Cross-Site Request Forgery (S)

CON.10.A15 Prevention of Cross-Site Request Forgery (S)

Developers SHOULD equip web applications with the security mechanisms required to distinguish between users' intended page requests and unintentionally forwarded third-party commands. At minimum, whether a secret token is required in addition to the session ID for access to protected resources and functions SHOULD be checked.

1. Resumen

Título	Estándar

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos
Fuente	Requisito

3. Regulaciones relacionadas

Regulaciones
Fuente	Regulación

Incidencias vinculadas

Vínculos
Tipo de vínculo	Incidencia
blocks	G 0.28 Software Vulnerabilities or Errors

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)