9 Retrieving Information from OPERA Cloud APIs

OPERA Cloud Distribution APIs always respond with content in application/json format. If requests are not made in application/json format, OPERA Cloud Distribution APIs may return plain text error responses.

Applications should ensure any data returned from OPERA Cloud Distribution APIs is managed securely and safely. The system should:

• Encrypt any sensitive data. Data returned from OPERA Cloud Distribution APIs may contain personal and other sensitive information. If your client system needs to store this information, it should be stored securely and encrypted within the data store. Access to the data should be restricted and accounts should have minimum access rights to the data in order to prevent elevated access.

• Any data output to users from an OPERA Cloud Distribution API response should be sanitized to ensure there is no possibility of cross-site scripting.

• Validate all data received from the OPERA Cloud Distribution APIs.