OWASP API4 2023 Integer Format (Edit)

Integers should be limited to mitigate resource exhaustion attacks. Specifying whether int32 or int64 is expected via format helps enforce proper constraints.

OWASPSecuritySchemaIntegersOpenAPI

Rule Definition

owasp-api4-2023-integer-format-error.yaml 
{"owasp-api4-2023-integer-format-error":{"description":"Integers should be limited to mitigate resource exhaustion attacks. Specifying whether int32 or int64 is expected via format helps enforce proper constraints.","message":"Schema of type integer must specify format (int32 or int64).","given":"$..[?(@.type==\"integer\")]","severity":"error","then":{"field":"format","function":"truthy"}}}

Back to All of the Rules