← Back to Baseline

MB-R293

HUMAN VERIFICATION REQUIRED ASVS 4.1.4 HTTP-method allowlist

MB-C18 ASVS Level 3 Human Assurance High

Only HTTP methods that are explicitly supported by the application or its API (including OPTIONS during preflight requests) can be used and that unused methods are blocked.