Content type
Description
The Content-Type header is not set to application/json. GraphQL APIs should always return a JSON response, according to the GraphQL specification.
Remediation
Ensure that the Content-Type header is set to application/json.
Configuration
CheckId:
http/content_type
Examples
Ignoring this check
{
"checks": {
"http/content_type": {
"skip": true
}
}
}
Score
Escape Severity: LOW
OWASP: A07:2023
CWE
- 668
- 1295
WASC: 14