Skip to content

Commit

Permalink
add api signature on Input
Browse files Browse the repository at this point in the history
  • Loading branch information
manutd committed Jul 14, 2022
1 parent 7680abd commit 3a23707
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,7 @@ Checklist of the most important security countermeasures when designing, testing
- [ ] Validate user input to avoid common vulnerabilities (e.g. `XSS`, `SQL-Injection`, `Remote Code Execution`, etc.).
- [ ] Don't use any sensitive data (`credentials`, `Passwords`, `security tokens`, or `API keys`) in the URL, but use standard Authorization header.
- [ ] Use an API Gateway service to enable caching, Rate Limit policies (e.g. `Quota`, `Spike Arrest`, or `Concurrent Rate Limit`) and deploy APIs resources dynamically.
- [ ] Use API signature to prevent some guy testing manually or automatically

## Processing
- [ ] Check if all the endpoints are protected behind authentication to avoid broken authentication process.
Expand Down

1 comment on commit 3a23707

@demozsaytara666
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please sign in to comment.