OWASP API8 2023 Define Error Validation

Carefully define schemas for all the API responses, including either 400, 422 or 4XX responses which describe errors caused by invalid requests.

Message: Missing error validation response of either 400, 422, or 4XX.

#OWASP #Security #Responses #Validation #OpenAPI

6 tools reach this content

find_building_blocksBrowse every rules entry — call it with type="rules".
get_building_blockOne rules entry in full; add include=content for the body (Pro).
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.

curl for this page

This rule

curl "https://api.apievangelist.com/v1/rules/owasp-api8-2023-define-error-validation-warn"

Full body (Pro)

curl "https://api.apievangelist.com/v1/rules/owasp-api8-2023-define-error-validation-warn?include=content" \
  -H "x-api-key: $AE_KEY"

Related across the network

curl "https://api.apievangelist.com/v1/rules/owasp-api8-2023-define-error-validation-warn/related"

All rules

curl "https://api.apievangelist.com/v1/rules?limit=25"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.