hard20 pts · first answer countsapi-testingapi-security

Too much data in a response

GET /users/me returns the profile plus "passwordHash", "isAdmin" and "internalNotes". The UI only shows the name and email. Why is this a defect?

A.The API exposes sensitive fields the client does not needB.The UI is too slow to show all of those fieldsC.The response should have been sent as XML insteadD.The user should be shown their own password hash

Discussion 0

Join free to post in the discussion.

Too much data in a response

Discussion 0

Related questions