6.5.9 Cross-site request forgery 4.13 Exact mapping. ASVS considers (CSRF). CSRF defense to be an aspect of access control. 6.5.10 Broken authentication and v2 and v3 - all Comprehensive mapping from session management. 1 up
6.5.9 Cross-site request forgery (CSRF). 4.13 Exact mapping. ASVS considers CSRF defense to be an aspect of access control. 6.5.10 Broken authentication and session management. v2 and v3 - all Comprehensive mapping from 1 up
OWASP_Application_Security_Verification_Standard_3.0.1.docx