API Testing · Junior · Question 59 of 75
What is the risk of an API that returns more fields than the client needs?
- 1Clients become faster because they get more data
- 2It may leak sensitive data like password hashes or emails
- 3There's no risk; extra fields are always harmless
Show the answer
Correct answer: It may leak sensitive data like password hashes or emails
Explanation
Excessive data exposure is a common API vulnerability. Testers check responses don't include internal or private fields.