Add changes to CR and C to align better with ASVS 5.0

[sydseter]

Description

• Align suite CR and C for Website App Edition v3.0 with ASVS 5.0
• Some suggestions incorporated as suggested by Copilot here.

AI Tool Disclosure

• My contribution does not include any AI-generated content
• My contribution includes AI-generated content, as disclosed below:
  • AI Tools: [e.g. GitHub CoPilot, ChatGPT, JetBrains Junie etc.]
  • LLMs and versions: [e.g. GPT-4.1, Claude Haiku 4.5, Gemini 2.5 Pro etc.]
  • Prompts: [Summarize the key prompts or instructions given to the AI tools]

Affirmation

• My code follows the CONTRIBUTING.md guidelines

[Copilot]

Pull request overview

Updates the Web App Edition v3.0 Cornucopia card explanations to better align the recommended practices with OWASP ASVS 5.0, primarily by expanding and clarifying guidance around cryptography, dependency management, and logging.

Changes:

• Expanded CR6/CR7/CR8 cryptography mitigation guidance (integrity, randomness, TLS, monitoring).
• Strengthened guidance in CX/C4/C5/C7 around pinned dependencies, centralized/secure logging, and identity/auth-related trust abuse.
• Minor punctuation/wording adjustments to existing guidance (e.g., C3).

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 11 comments.

Show a summary per file

File	Description
cornucopia.owasp.org/data/cards/webapp-cards-3.0-en/cryptography/CR8/explanation.md	Adds additional crypto mitigations (integrity/authenticity, CSPRNG entropy, TLS, monitoring).
cornucopia.owasp.org/data/cards/webapp-cards-3.0-en/cryptography/CR7/explanation.md	Adds additional crypto configuration mitigations (integrity/authenticity, CSPRNG entropy, TLS, monitoring).
cornucopia.owasp.org/data/cards/webapp-cards-3.0-en/cryptography/CR6/explanation.md	Adds integrity/authenticity failure mode and clarifies encryption guidance for data in memory/transit/processing.
cornucopia.owasp.org/data/cards/webapp-cards-3.0-en/cornucopia/CX/explanation.md	Updates dependency guidance to include version pinning.
cornucopia.owasp.org/data/cards/webapp-cards-3.0-en/cornucopia/C7/explanation.md	Expands “what can go wrong” consequences for insufficient logging/auditing.
cornucopia.owasp.org/data/cards/webapp-cards-3.0-en/cornucopia/C5/explanation.md	Expands trust-abuse examples and adds identity management mitigation.
cornucopia.owasp.org/data/cards/webapp-cards-3.0-en/cornucopia/C4/explanation.md	Adds guidance about securely transmitting logs to a separate system and protecting them.
cornucopia.owasp.org/data/cards/webapp-cards-3.0-en/cornucopia/C3/explanation.md	Minor punctuation fix for consistency.

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.