+CON.10.A15 Prevention of Cross-Site Request Forgery (S)

CON.10.A15 Prevention of Cross-Site Request Forgery (S)

Developers SHOULD equip web applications with the security mechanisms required to distinguish between users' intended page requests and unintentionally forwarded third-party commands. At minimum, whether a secret token is required in addition to the session ID for access to protected resources and functions SHOULD be checked.

1. Apžvalga

Pavadinimas	Standartas

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai
Šaltinis	Reikalavimas

3. Susiję teisės aktai

Teisės aktai
Šaltinis	Reguliavimas

Susietos užduotys

Saitai
Saito tipas	Užduotis
blocks	G 0.28 Software Vulnerabilities or Errors

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)