OWASP API4 2023 String Limit String size should be limited to mitigate resource exhaustion attacks. This can be done using maxLength, enum, or const. Message: Schema of type string must specify maxLength, enum, or const. #OWASP #Security #Schema #Strings #OpenAPI ← Back to all Rules