Our system is accepting requests including special characters, see parameter2
.
Request [
{
"reqHeader": {
"parameter1": "abc",
"parameter2": "123456 script>alert(1)</script",
"parameter3": "2022-11-8"
}
}
]
We are not saving data in any database, and we are not returning such data in any of our APIs. But we have been asked to check for validation for special characters. My worry is if we are going to validate each parameter for special characters, it will cause an impact on API performance.
Do I really need to validate such characters in my scenario?