OWASPASVS 5.0 requirement

ASVS-V13.2.5 The web or application server is configured with an allowlist of resources or systems to which the server can send requests or load data or…

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V13 Configuration
Section
V13.2 Backend Communication Configuration
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that the web or application server is configured with an allowlist of resources or systems to which the server can send requests or load data or files from.