.png){kind=logo}
RMacdonald857430 (Community Member) asked a question.
Does DAST support API endpoints that require file upload?
Our API solution has a POST endpoint that accepts a file to be uploaded as part of the form data.
When running an API specification dynamic scan, the scan doesn't go any further than the initial request because the endpoint returns a 400 error. The 400 error is because the scanner did not provide a file that passed our validation requirements.
Is it possible to scan this type of endpoint?
hello @RMacdonald857430 (Community Member)
As far as I know we can't "input" or force something related to rules in testing into Veracode.
I recommend you provide the details to Veracode Support because maybe they can ask to include a new rule or update the engine to test in these use cases.