面试题与答案

Security testing for APIs involves checking for vulnerabilities such as injection attacks, data exposure, and unauthorized access. It often includes using tools like OWASP ZAP.

Load testing involves assessing the performance of an API by subjecting it to a specific load, often by simulating multiple concurrent users or requests. It helps identify performance bottlenecks.

A pre-flight request is an HTTP OPTIONS request sent by the browser before the actual request. It checks if the server allows the actual request to be made from the specific origin.