API Testing · Middle · Question 21 of 75
What is mass assignment in an API?
- 1The API updates many records with one request
- 2The API assigns the same ID to several resources
- 3The API saves fields the client shouldn't set, like
role
Show the answer
Correct answer: The API saves fields the client shouldn't set, like role
Explanation
Sending {"name":"Ann","role":"admin"} to a profile update shouldn't make you an admin. Testers try extra privileged fields.