To avoid unexpected values being sent or leaked, strings should have a format, RegEx pattern, enum, or const to restrict the possible values.
OWASP API4 2023 String Restricted
Message: Schema of type string should specify a format, pattern, enum, or const.
