+APP.1.2.A1 Use of Basic Security Mechanisms (B)

APP.1.2.A1 Use of Basic Security Mechanisms (B)

Any web browser used MUST ensure that every instance and process can only access its own resources (sandboxing). Webpages MUST be isolated from each other in independent processes, or at least in their own threads. Plug-ins and extensions MUST also be executed in isolated areas.

Any web browser used MUST implement the Content Security Policy (CSP). The current highest level of the CSP SHOULD be met.

Browsers MUST support same-origin policy and subresource integrity safeguards.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware