+CON.10.A4 Controlled Integration of Content in Web Applications (B)

CON.10.A4 Controlled Integration of Content in Web Applications (B)

Developers MUST ensure that a web application only integrates the intended content for delivery to the user.

The destinations of the redirection function of a web application MUST be restricted sufficiently so that users are only redirected to trustworthy websites. If a user is leaving a trustworthy domain, the web application MUST inform them of this.

1. Panoramica

Titolo	Standard

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti
Fonte	Requisito

3. Regolamentazioni correlate

Regolamentazioni
Fonte	Regolamentazione

Ticket collegati

Collegamenti
Tipo di collegamento	Ticket
blocks	G 0.28 Software Vulnerabilities or Errors

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)