teejlab / API-Risk-Assessment-Framework

A framework for quantifying API risks.
https://teejlab.github.io/API-Risk-Assessment-Framework/intro.html
MIT License
5 stars 8 forks source link

PII example and limitation #58

Open harryyikhchan opened 2 years ago

harryyikhchan commented 2 years ago

It was found that there are many false positives in PII/FII extraction. The root cause was there are different formats of API sample response, such as JSON, XML, HTML and plain text. It is suggested to create multiple parsers that take in different formats and parse to PII/FII extractor.