OWASPASVS 5.0 requirement
ASVS-V3.1.1 Application documentation states the expected security features that browsers using the application must support (such as https, http…
- Standard
- OWASP ASVS 5.0
- Chapter
- V3 Web Frontend Security
- Section
- V3.1 Web Frontend Security Documentation
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that application documentation states the expected security features that browsers using the application must support (such as HTTPS, HTTP Strict Transport Security (HSTS), Content Security Policy (CSP), and other relevant HTTP security mechanisms). It must also define how the application must behave when some of these features are not available (such as warning the user or blocking access).