← Back to Baseline

MB-R343

HUMAN VERIFICATION REQUIRED ASVS 13.1.3 External-resource strategy

MB-C18 ASVS Level 3 Human Assurance High

The application documentation defines resource-management strategies for every external system or service it uses (e.g., databases, file handles, threads, HTTP connections). This should include resource-release procedures, timeout settings, failure handling, and where retry logic is implemented, specifying retry limits, delays, and back-off algorithms. For synchronous HTTP request-response operations it should mandate short timeouts and either disable retries or strictly limit retries to prevent cascading delays and resource exhaustion.