owaspNoAdditionalProperties
owaspCheckErrorResponse will check if the additionalProperties
keyword is used it must be set to false
Example ruleset configuration
my-security-rule:
description: Checks that no additional properties are allowed in the API.
type: validation
given: $
then:
function: owaspNoAdditionalProperties
Used by the following rules: