Azure / Azure/data-api-builder
`x-ms-api-role` header length restriction enforcement
Open
auth
security
- Dominant language
- C#
- Stars
- 1.5k
- Forks
- 370
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 8
Description
3.) Evaluate whether we need additional restrictions on the custom client role header (x-ms-api-role) such as max length allowed for the header value, if exceeded, we don’t even process/reject request.
Contributor guide
Assessment
This issue has not been assessed yet.