3 ms·
> It will not attempt the riskiest attack scenarios What does that mean exactly? Do you manually assess what is risky for a particular API, or is it up to the
by ichbinlegion 3y ago
> It will not attempt the riskiest attack scenarios
What does that mean exactly?
Do you manually assess what is risky for a particular API, or is it up to the system to choose?
If it's up to it, what happens if it thinks that's not risky to delete user data?
- glimow 3y agoWe created specific safeguards for production mode; for instance, Escape doesn't launch any DELETE requests in prod mode. You can also manually configure an allowlist/blocklist of operations for specific use cases.