BBVA / apicheck

The DevSecOps toolset for REST APIs
https://bbva.github.io/apicheck/
Apache License 2.0
270 stars 65 forks source link

As per the HTTP RFC, headers and query params can be sent multiple times #20

Open panchoh opened 5 years ago

panchoh commented 5 years ago

As of now, we assumed that both query params and headers could be informed only once (per request). @nilp0inter brought some light into this, and clarified that the HTTP RFC clearly speficies the opposite.

We have to update at-proxy as well as ac-replay to handle these cases. Right now they will fail if multiple headers and/or query params are used.