9 Retrieving Information from OPERA Cloud APIs
OPERA Cloud Distribution APIs always respond with content in application/json
format. If requests are not made in application/json
format, OPERA Cloud Distribution APIs may
return plain text error responses.
-
Encrypt any sensitive data. Data returned from OPERA Cloud Distribution APIs may contain personal and other sensitive information. If your client system needs to store this information, it should be stored securely and encrypted within the data store. Access to the data should be restricted and accounts should have minimum access rights to the data in order to prevent elevated access.
-
Any data output to users from an OPERA Cloud Distribution API response should be sanitized to ensure there is no possibility of cross-site scripting.
-
Validate all data received from the OPERA Cloud Distribution APIs.