9.7 Minimal parameters are sent to untrusted systems

Verify the application minimizes the number of parameters in a request, such as hidden fields, Ajax variables, cookies and header values.

Levels: 2, 3