Validation of json schema when posting to API endpoint

Help
1

Hi,

Does UiPath Orchestrator make any check on the payload sent in to an API endpoint? I’m thinking to do a schema validation in a proxy we are building to allow only a few endpoints through, and would like to know if there is an available json schema we can compare it against.

Apart from it are there any mitigation steps to prevent malicious commands to be sent as part of the payload to the server?

Thanks

2

UiPath has not defined a separate JSON schema, but the JSON leveraged for the Orchestrator API does adhere to IETF standards. There are several mechanisms in place to prevent malicious commands. The API adheres to the OData protocol, you can find more data here: OData Version 4.0. Part 1: Protocol Plus Errata 03

1 Like