API validation
API validation is the ordered pipeline every write endpoint runs: origin, content type, length, rate limit, schema parse.
Why it matters
Hand-rolling a subset per route is how one endpoint ends up without a rate limit, and it is always the one that sends email.
How it is measured
Post to a write endpoint with a foreign Origin header and confirm a 403 before any parsing.
Checks that involve api validation
Related terms
Questions
What is api validation?
API validation is the ordered pipeline every write endpoint runs: origin, content type, length, rate limit, schema parse.
Why does api validation matter?
Hand-rolling a subset per route is how one endpoint ends up without a rate limit, and it is always the one that sends email.
How is api validation measured?
Post to a write endpoint with a foreign Origin header and confirm a 403 before any parsing.