OWASP API4 2023 String Restricted

To avoid unexpected values being sent or leaked, strings should have a format, RegEx pattern, enum, or const to restrict the possible values.

Message: Schema of type string should specify a format, pattern, enum, or const.

#OWASP #Security #Schema #Strings #OpenAPI

6 tools reach this content

find_building_blocksBrowse every rules entry — call it with type="rules".
get_building_blockOne rules entry in full; add include=content for the body (Pro).
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.

curl for this page

This rule

curl "https://api.apievangelist.com/v1/rules/owasp-api4-2023-string-restricted-warn"

Full body (Pro)

curl "https://api.apievangelist.com/v1/rules/owasp-api4-2023-string-restricted-warn?include=content" \
  -H "x-api-key: $AE_KEY"

Related across the network

curl "https://api.apievangelist.com/v1/rules/owasp-api4-2023-string-restricted-warn/related"

All rules

curl "https://api.apievangelist.com/v1/rules?limit=25"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.