ASVS Requirement 13.1.3

• Level: 3
• Chapter: V13 Configuration
• Section: V13.1 Configuration Documentation
• Source: 0x22-V13-Configuration.md

Description

Verify that the application documentation defines resource‑management strategies for every external system or service it uses (e.g., databases, file handles, threads, HTTP connections). This should include resource‑release procedures, timeout settings, failure handling, and where retry logic is implemented, specifying retry limits, delays, and back‑off algorithms. For synchronous HTTP request–response operations it should mandate short timeouts and either disable retries or strictly limit retries to prevent cascading delays and resource exhaustion.