+CON.10.A4 Controlled Integration of Content in Web Applications (B)

CON.10.A4 Controlled Integration of Content in Web Applications (B)

Developers MUST ensure that a web application only integrates the intended content for delivery to the user.

The destinations of the redirection function of a web application MUST be restricted sufficiently so that users are only redirected to trustworthy websites. If a user is leaving a trustworthy domain, the web application MUST inform them of this.

1. Prezentare generală

Titlu	Standard

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe
Sursă	Cerință

3. Reglementări asociate

Reglementări
Sursă	Reglementare

Tichete legate

Legături
Tip de legătură	Tichet
blocks	G 0.28 Software Vulnerabilities or Errors

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)