OWASPASVS 5.0 requirement
ASVS-V4.4.2 Verify that, during the initial http websocket handshake, the origin header field is checked against a list of origins allowed for the…
- Standard
- OWASP ASVS 5.0
- Chapter
- V4 API and Web Service
- Section
- V4.4 WebSocket
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that, during the initial HTTP WebSocket handshake, the Origin header field is checked against a list of origins allowed for the application.