QID 580533
QID 580533: String Field Response To Exact Minimum Length Mismatches Schema
In this scenario fields of string type are updated with strings of exact minimum length as defined in the swagger file. If the minimum length is not defined for the string type this test is skipped. All string fields with minimum length defined are update iteratively with strings of exact minimum length and send to the server. The expectation is that server will treat the requests as happy paths since the length of inserted strings matches the minimum.The purpose of the test is to verify that all defined boundaries are properly implemented. Based on testing done replacing string values with the exact minimum defined in swagger file it is determined that the string with valid minimum is accepted. The response code matches the schema definition. The response to some valid values does not match schema definition for field being tested.
Enforcing minimum string length defined in swagger file will help provide clarity to the API users and avoid abuse of the API by hackers. API users might be confused with the response mismatch to valid values.
CVEs related to QID 580533
| Advisory ID | Software | Component | Link |
|---|