OWASPASVS 5.0 requirement
ASVS-V15.1.3 The application documentation identifies functionality which is time-consuming or resource-demanding.
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.1 Secure Coding and Architecture Documentation
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application documentation identifies functionality which is time-consuming or resource-demanding. This must include how to prevent a loss of availability due to overusing this functionality and how to avoid a situation where building a response takes longer than the consumer's timeout. Potential defenses may include asynchronous processing, using queues, and limiting parallel processes per user and per application.