HUMAN VERIFICATION REQUIRED ASVS 15.3.7 HTTP parameter pollution

The application has defenses against HTTP parameter pollution attacks, particularly if the application framework makes no distinction about the source of request parameters (query string, body parameters, cookies, or header fields).