OWASPASVS 5.0 requirement
ASVS-V15.3.2 Where the application backend makes calls to external urls, it is configured to not follow redirects unless it is intended functionality.
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.3 Defensive Coding
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that where the application backend makes calls to external URLs, it is configured to not follow redirects unless it is intended functionality.