owaspNoApiKeyInUrl
owaspCheckErrorResponse will check that no parameters are used in the URL to pass API keys.
Example ruleset configuration
my-security-rule:
description: Checks for API keys being passed in the URL
type: validation
given: $
then:
function: owaspNoApiKeyInUrl
Used by the following rules: