Forum Discussion

etan1's avatar
etan1
New Contributor
12 years ago

How to add security tests to REST requests with JSON content

Ok, let me explain my problem: I have REST request with few parameters, POST method, service accept only JSON content, so I changed Media Type to application/json and put values to the request body...
etan1's avatar
etan1
New Contributor
12 years ago
Yes, I'm sure, I checked it directly in server logs.

When I do the same for more "static" properties (directly placed in request body, like authorization header) everything works fine (they are replaced by SQL Injection strings), problem occurs only for parameters that I put in the request by editor under the table of parameters.