+CON.10.A7 Protection of Confidential Data (B)

CON.10.A7 Protection of Confidential Data (B)

Developers MUST ensure that confidential data is transferred from clients to servers using only the HTTP post method.

Developers MUST use directives in web applications to ensure that no sensitive data is cached on the client side. Developers MUST ensure that no confidential form data is displayed in plain text in forms. A web application SHOULD prevent confidential data from being stored unexpectedly by the web browser. All web application access data MUST be protected against unauthorised access on the server side with the help of cryptographic algorithms (salted hash). The files containing the source code of a web application MUST be protected against unauthorised retrieval.

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję teisės aktai

Teisės aktai

Susietos užduotys

Saitai
blocks G 0.28 Software Vulnerabilities or Errors