OWASPASVS 5.0 requirement
ASVS-V17.1.1 The traversal using relays around nat (turn) service only allows access to ip addresses that are not reserved for special purposes (e.g.,…
- Standard
- OWASP ASVS 5.0
- Chapter
- V17 WebRTC
- Section
- V17.1 TURN Server
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the Traversal Using Relays around NAT (TURN) service only allows access to IP addresses that are not reserved for special purposes (e.g., internal networks, broadcast, loopback). Note that this applies to both IPv4 and IPv6 addresses.