Schema: Invalid references¶

Identifier: invalid_refs

Scanner(s) Support¶

GraphQL Scanner	REST Scanner	WebApp Scanner

Description¶

Invalid references occur when a system points to components that don't actually exist. This usually happens when you're expecting everything to be defined in one file, but then you end up with a pointer to something missing, causing errors or unexpected behavior when the system tries to use it. The real risk is that if these broken references arent caught, your application might crash or behave unpredictably, potentially opening up opportunities for attackers to exploit the error conditions. Developers commonly overlook validating references or assume they're all correctly defined, which can lead to security and stability issues down the line.

References:

https://swagger.io/specification/#relative-references-in-uris

Configuration¶

Example¶

Example configuration:

---
security_tests:
  invalid_refs:
    assets_allowed:
    - REST
    - GRAPHQL
    - WEBAPP
    skip: false

Reference¶

`assets_allowed`¶

Type : List[AssetType]*

List of assets that this check will cover.

`skip`¶

Type : boolean

Skip the test if true.