Enable API Fuzzing and DAST API to generate sample data for XML from OpenAPI spec

Problem to solve

At this time our API Fuzzing and DAST API try to generate sample data when the OpenAPI specification does not provide enough sample data. The generated data is limited to specific content types:

  1. application/x-www-form-urlencoded
  2. multipart/form-data
  3. application/json

The problem to solve is to enable the API Fuzz and DAST to generate content for commonly used Content-Type:

  • application/xml

Proposal

  1. Enable support in OpenAPI reader to produce application/xml
  2. Add tests
    1. Update flask target.
    2. Add Unit test generating operations where content type is application/xml (OAS 2.0, OAS 3.0)
    3. Add Integration test using operations where content type is application/xml (OAS 2.0, OAS 3.0)
    4. Add e2e test (OAS 2.0, OAS 3.0)

Links

Edited by Herber Madrigal