OWASPASVS 5.0 requirement
ASVS-V3.5.4 Separate applications are hosted on different hostnames to leverage the restrictions provided by same-origin policy, including how…
- Standard
- OWASP ASVS 5.0
- Chapter
- V3 Web Frontend Security
- Section
- V3.5 Browser Origin Separation
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that separate applications are hosted on different hostnames to leverage the restrictions provided by same-origin policy, including how documents or scripts loaded by one origin can interact with resources from another origin and hostname-based restrictions on cookies.