OWASP API Security Top 10 - 2

Walkthrough summary

OWASP API Security Top 10 - 2 TryHackMe walkthrough with 13 answered prompts and lab methodology notes.

Sample prompts covered

• Is it a good practice to blindly insert/update user-provided data in the database (yea/nay)?
  Open the walkthrough page to inspect the full answer and command flow.
• What would be the returned credit value after performing Question#2?
  Open the walkthrough page to inspect the full answer and command flow.
• Is it an excellent approach to show error logs from the stack trace to general visitors (yea/nay)?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the HTTP response code?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the Error ID number in the HTTP response message?
  Open the walkthrough page to inspect the full answer and command flow.