OWASPASVS 5.0 requirement
ASVS-V13.4.5 Documentation (such as for internal apis) and monitoring endpoints are not exposed unless explicitly intended.
- Standard
- OWASP ASVS 5.0
- Chapter
- V13 Configuration
- Section
- V13.4 Unintended Information Leakage
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that documentation (such as for internal APIs) and monitoring endpoints are not exposed unless explicitly intended.