API Design · Middle · Question 37 of 75
What does OWASP API4:2023 Unrestricted Resource Consumption cover?
- ✓Correct answer: Missing limits on request rate, payload size, page size, upload size or expensive operations, which lets clients exhaust resources or costs
- 2Leaked API keys
- 3Wrong status codes
Explanation
It also covers paid third-party resources: an endpoint that sends SMS without limits can run up a huge bill.