OWASPASVS 5.0 requirement
ASVS-V7.6.2 Creation of a session requires either the user's consent or an explicit action, preventing the creation of new application sessions without…
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.6 Federated Re-authentication
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that creation of a session requires either the user's consent or an explicit action, preventing the creation of new application sessions without user interaction.