How this template works
APIs Selection
The template uses query parameters to filter the API requests. It looks for query parameters with keys that match certain regular expressions (such as "limit", "size", or "page") and extracts their corresponding values. These values are then stored as variables for later use.
Execute request
The template modifies the query parameter "limitKey" by appending a "0" to its value. This is done using the "modify_query_param" action. The modified request is then sent to the API server.
Validation
The template validates the response received from the API server. It checks that the response code is between 200 and 299 (indicating a successful response). Additionally, it compares the length of the response payload to the original length stored in the "original_length" variable. The validation passes if the response payload length is greater than the original length. Note: The template is designed to detect and mitigate the potential DOS attack caused by pagination misconfiguration in APIs. It ensures that the API server imposes a limit on the number of resources returned, preventing performance issues and potential authentication flaws.
