Особливості усунення вразливостей REST API до АТАК XSS та SQL- ін'єкцій

Abstract

The main purpose of this paper is to study methods of eliminating REST API vulnerabilities aimed at protecting against XSS and SQL injection attacks. In particular, we will consider the basic principles of protection, such as input data validation, parameterized queries, output data encoding, the use of security policies, as well as other approaches to protecting REST APIs from these threats.