← Back to Baseline

MB-R287

HUMAN VERIFICATION REQUIRED ASVS 3.5.7 No authorized data in scripts

MB-C18 ASVS Level 3 Human Assurance Medium

Data requiring authorization is not included in script resource responses, like JavaScript files, to prevent Cross-Site Script Inclusion (XSSI) attacks.