OWASPASVS 5.0 requirement
ASVS-V13.2.4 An allowlist is used to define the external resources or systems with which the application is permitted to communicate (e.g., for outbound…
- Standard
- OWASP ASVS 5.0
- Chapter
- V13 Configuration
- Section
- V13.2 Backend Communication Configuration
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that an allowlist is used to define the external resources or systems with which the application is permitted to communicate (e.g., for outbound requests, data loads, or file access). This allowlist can be implemented at the application layer, web server, firewall, or a combination of different layers.