Error Handling
V7.4.1
Verify that a generic message is shown when an unexpected or security sensitive error occurs, potentially with a unique ID which support personnel can use to investigate. (C10)
Level 1 required: True
Level 2 required: True
Level 3 required: True
CWE: 210
V7.4.2
Verify that exception handling (or a functional equivalent) is used across the codebase to account for expected and unexpected error conditions. (C10)
Level 1 required: False
Level 2 required: True
Level 3 required: True
CWE: 544
V7.4.3
Verify that a "last resort" error handler is defined which will catch all unhandled exceptions. (C10)
Level 1 required: False
Level 2 required: True
Level 3 required: True
CWE: 431
Disclaimer:
Credit via OWASP ASVS. For more information visit The OWASP ASVS Project or Github respository.. OWASP ASVS is under the Creative Commons Attribution-Share Alike v3.0 license.
