Skip to content

Commit ee6d527

Browse files
authored
Update 0xa7-security-misconfiguration.md
1 parent 735f375 commit ee6d527

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

2019/en/src/0xa7-security-misconfiguration.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,9 @@ The API life cycle should include:
6565
assets (e.g., images).
6666
* An automated process to continuously assess the effectiveness of the
6767
configuration and settings in all environments.
68+
* To prevent exception traces and other valuable information from being sent
69+
back to attackers, if applicable, define and enforce all API response payload
70+
schemas including error responses.
6871

6972
## References
7073

0 commit comments

Comments
 (0)