OWASP API Security Top 10

OWASP. (2019). OWASP API Security Top 10.

Type

Standard

Intellectual base

Reference work

Year

2019

Link

https://owasp.org/API-Security/editions/2019/en/0xa3-excessive-data-exposure/

Cited from

security_intelligence

Cited by

1 citation across 1 artifact.

Each citation links to the sentence it supports in the citing article.

Primes

• Minimum-Necessary Disclosure
  • The producer is the API server with broad authoritative access to the full user record (id, name, email, hashed password, internal flags, billing tokens).

    This sourceThe negative-space failure of serializing full records and relying on the client to filter; the prescribed fix is source-side response projection per consumer role.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Registry ID ref:8d6ed78587bf · see in the full table