This exposes the API key in plaintext on the network and can lead to attackers finding and using the API key to make unauthorized API calls.
This rule applies at the API Specification level (OAS/Swagger).
Exposure to Eavesdropping: HTTP transmits data in plaintext, which means that API keys sent over HTTP can be intercepted by anyone monitoring the network traffic. This exposes the API key to potential theft or misuse by malicious actors.
