← Back to Baseline

MB-R200

HUMAN VERIFICATION REQUIRED ASVS 15.3.3 Mass-assignment protection

MB-C15 ASVS Level 2 Human Assurance Medium

The application has countermeasures to protect against mass assignment attacks by limiting allowed fields per controller and action, e.g., it is not possible to insert or update a field value when it was not intended to be part of that action.