API Design · Senior · Question 31 of 75

What does OWASP API10:2023 (Unsafe Consumption of APIs) cover?

1Clients calling your API too often
2Using GraphQL
✓Correct answer: Trusting data from third-party APIs too much: not validating responses, following redirects blindly, or lacking timeouts

Explanation

Responses from partners are untrusted input. Validate them like user input.

Further reading

OWASP API Security Top 10 (2023) ↗

Test yourself

Take the API Design · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.