sthope/gitea_templates
Template
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Check the API Security Checklist Project (#91)

Browse Source 
- https://github.com/wearehive/project-guidelines/issues/74
- https://github.com/shieldfy/API-Security-Checklist
This commit is contained in:
tcme 2017-09-02 14:44:18 +02:00 committed by Vahid Panjganj
parent 63c23bac89
commit 35c88d2a92
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -713,6 +713,7 @@ These are some basic security best practices:
_Why:_
> For instance, accepting the `application/x-www-form-urlencoded` mime type allows the attacker to create a form and trigger a simple POST request. The server should never assume the Content-Type. A lack of Content-Type header or an unexpected Content-Type header should result in the server rejecting the content with a `4XX` response.
* Check the API Security Checklist Project. [read more...](https://github.com/shieldfy/API-Security-Checklist)
<a name="api-documentation"></a>
### 9.3 API documentation