Skip to content
This repository has been archived by the owner on Nov 8, 2024. It is now read-only.

Support for remote/file references #1674

Closed
kylef opened this issue Feb 17, 2020 · 1 comment
Closed

Support for remote/file references #1674

kylef opened this issue Feb 17, 2020 · 1 comment

Comments

@kylef
Copy link
Member

kylef commented Feb 17, 2020

Support for remote (http) and local file references in OAS 2 and 3 schemas along with API Blueprint's Schema keyword.

For example, a schema such as:

{
  "$ref": "./api/attribute.yaml#/attribute"
}

This particular feature needs a lot of thought as it can allow potential security problems for example when you run Dredd against an API Blueprint or OpenAPI document which contains a remote $ref in a schema. The $ref could potentially be used to populate a request body with sensitive data such as /etc/shadow, ~/.npmrc, ~/.ssh/id_rsa etc. This is the particular reason why this has been been supported. JSON Schema can be used to generate request and response bodies.

Additional context

Raised from #1329 (comment)

@kylef
Copy link
Member Author

kylef commented Feb 17, 2020

Duplicate of #676

@kylef kylef marked this as a duplicate of #676 Feb 17, 2020
@kylef kylef closed this as completed Feb 17, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant