OWASPASVS 5.0 requirement
ASVS-V4.4.4 Dedicated websocket session management tokens are initially obtained or validated through the previously authenticated https session when…
- Standard
- OWASP ASVS 5.0
- Chapter
- V4 API and Web Service
- Section
- V4.4 WebSocket
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that dedicated WebSocket session management tokens are initially obtained or validated through the previously authenticated HTTPS session when transitioning an existing HTTPS session to a WebSocket channel.