MuleSoft APIkit Router - QueryParam and Header Strict Validation Configuration

Hello Muleys,

Here's another interesting article on how to restrict additional queryParams and headers that are sent other than those defined in RAML. 

We all do the test if the required parameters are working fine or not but we forget to test if unnecessary parameters sent along with required parameters. 

There are chances that attackers might send some thousands of queryParams and Headers with large content. In that case, your application will crash. So what to do?

When you download the RAML and generate flows,

By default the configuration is disabled. You have to enable the strict validation config as below: