6.5.7 Do coding techniques address cross-site scripting (XSS) Examine vulnerabilities? policies and procedures Interview responsible personnel 6.5.8 Do coding techniques address improper access control Examine such as insecure direct object references, failure to restrict policies and URL access, directory traversal, and failure to restrict user procedures access to functions? Interview responsible personnel 6.5.9 Do coding techniques address cross-site request forgery Examine (CSRF)? policies and procedures Interview responsible personnel 6.5.10 Do coding techniques address broken authentication and Examine session management? policies and procedures Interview responsible personnel
6.5.7 Do coding techniques address cross-site scripting (XSS) vulnerabilities? Examine policies and procedures Interview responsible personnel 6.5.8 Do coding techniques address improper access control such as insecure direct object references, failure to restrict URL access, directory traversal, and failure to restrict user access to functions? Examine policies and procedures Interview responsible personnel 6.5.9 Do coding techniques address cross-site request forgery (CSRF)? Examine policies and procedures Interview responsible personnel 6.5.10 Do coding techniques address broken authentication and session management? Examine policies and procedures Interview responsible personnel
PCI-DSS-v3_2-SAQ-D_Merchant-rev1_1.docx