It’s hard to write good API specifications, and since most API gateways use them as IAC, they should be carefully checked for common mistakes. Writing an API that sticks to the original design is extremely difficult, and it must be validated because it differs from the original spec in some places.
When developers make APIs, they often leave them open to open redirects, injections, HTTP pollution, and other problems.
