medium10 pts · first answer countsapi-testingapi-securityapi-auth

API key in the URL

An API takes its key as GET /rates?apiKey=XYZ. What should a tester flag?

A.Query strings make every request a lot slowerB.Keys placed in URLs cannot be rotated laterC.URLs are logged by servers and proxies, leaking the keyD.GET requests cannot carry any query parameters

Discussion 0

Join free to post in the discussion.

API key in the URL

Discussion 0

Related questions