API Testing · Middle · Question 56 of 75

What should you test about a search endpoint's filters?

1Only the one filter that users use most often
2Only that every filter name appears in the API docs
3Combinations, empty results, bad values and injection

Show the answer

Correct answer: Combinations, empty results, bad values and injection

Explanation

Filters combine with AND or OR as documented, invalid values give 400, and user input can't change the query logic.

Further reading

OWASP Top 10 ↗

Test yourself

Take the API Testing · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.