HUMAN VERIFICATION REQUIREDASVS 4.4.3 WebSocket session tokens (when websocket is used)
MB-C16ASVS Level 2 Contextual Human AssuranceMedium
If the application's standard session management cannot be used, dedicated tokens are being used for this, which comply with the relevant Session Management security requirements.