OWASP API Security Top 10 2019 Checklist

general > use-https-for-scheme-protocol

Guidance / Message

Only use https protocol scheme

Examples

valid

#%RAML 1.0
title: example api
version: 1.0.0
protocols: [ HTTPS ]

invalid

#%RAML 1.0
title: example api
version: 1.0.0
protocols: [ HTTP ]

Applies to WebAPI

Constraint

Type: Declarative Validation