Table 3 – Requirements, Architecture, and Design
Prevention and Mitigation Practices CWE
Ensure that no externally-supplied requests are honored by requiring that all redirect
requests include a unique nonce generated by the application [R.601.1]. Be sure that the