+CON.10.A4 Controlled Integration of Content in Web Applications (B)

CON.10.A4 Controlled Integration of Content in Web Applications (B)

Developers MUST ensure that a web application only integrates the intended content for delivery to the user.

The destinations of the redirection function of a web application MUST be restricted sufficiently so that users are only redirected to trustworthy websites. If a user is leaving a trustworthy domain, the web application MUST inform them of this.

1. Visão geral

Título	Norma

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos
Fonte	Requisito

3. Regulamentos relacionados

Regulamentos
Fonte	Regulamentação

Pedidos ligados

Ligações
Tipo de ligação	Pedido
blocks	G 0.28 Software Vulnerabilities or Errors

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)