+APP.1.2.A1 Use of Basic Security Mechanisms (B)

APP.1.2.A1 Use of Basic Security Mechanisms (B)

Any web browser used MUST ensure that every instance and process can only access its own resources (sandboxing). Webpages MUST be isolated from each other in independent processes, or at least in their own threads. Plug-ins and extensions MUST also be executed in isolated areas.

Any web browser used MUST implement the Content Security Policy (CSP). The current highest level of the CSP SHOULD be met.

Browsers MUST support same-origin policy and subresource integrity safeguards.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware