SOAP Web Service
V13.3.1
Verify that XSD schema validation takes place to ensure a properly formed XML document, followed by validation of each input field before any processing of that data takes place.
Level 1 required: True
Level 2 required: True
Level 3 required: True
CWE: 20
V13.3.2
Verify that the message payload is signed using WS-Security to ensure reliable transport between client and service.
Level 1 required: False
Level 2 required: True
Level 3 required: True
CWE: 345
Disclaimer:
Credit via OWASP ASVS. For more information visit The OWASP ASVS Project or Github respository.. OWASP ASVS is under the Creative Commons Attribution-Share Alike v3.0 license.
Loading comments 0%