OneTest Logo
Sign In Get Started

OneTest API Documentation

Professional API for OneTest License Management System

Base URL: https://xss.onetest.fr

Quick Start

Authentication

The OneTest API uses API keys for authentication. Include your API key in requests either as a query parameter or in the JSON body.

?api_key=your-api-key-here

Response Format

All API responses are in JSON format with consistent structure including success status and relevant data. 

{
  "success": true,
  "user": { ... }
}

XSS Testing

POST

Submit HTTP requests for XSS vulnerability testing

Endpoint

https://xss.onetest.fr/

Authentication

X-API-Key required

Your API key must be provided in the request header

Request Body Example

{
  "request": {
    "method": "GET",
    "url": "https://example.com/search?q=test",
    "headers": {
      "User-Agent": "Mozilla/5.0...",
      "Accept": "text/html"
    },
    "body": ""
  },
  "response": {
    "status_code": 200,
    "headers": {
      "Content-Type": "text/html"
    },
    "body": "..."
  }
}

cURL Example

curl -X POST "https://xss.onetest.fr/" \
     -H "Content-Type: application/json" \
     -H "X-API-Key: your-api-key-here" \
     -d '{
       "request": {
         "method": "GET",
         "url": "https://example.com/search?q=test",
         "headers": {},
         "body": ""
       },
       "response": {
         "status_code": 200,
         "headers": {"Content-Type": "text/html"},
         "body": "Hello World"
       }
     }'

Test XSS Endpoint Live!

Enter your API key and HTTP request details to test XSS vulnerabilities.

Verify API Key

GET POST

Verify an API key and retrieve associated user information

Endpoint

https://xss.onetest.fr/api/v1/verify-api-key

Parameters

api_key required

Your API key for authentication

Example Request

curl "https://xss.onetest.fr/api/v1/verify-api-key?api_key=your-api-key-here"

Response

{
  "success": true,
  "user": {
    "username": "john_doe",
    "email": "john@example.com",
    "role": "user"
  }
}

JavaScript Example

fetch('https://xss.onetest.fr/api/v1/verify-api-key?api_key=your-api-key-here')
  .then(response => response.json())
  .then(data => {
    if (data.success) {
      console.log('User:', data.user);
    }
  });

Error Responses

400 Bad Request 
{
  "success": false,
  "message": "API key required"
}
404 Not Found 
{
  "success": false,
  "message": "Invalid API key"
}

Security & Best Practices

Security Guidelines

  • Always use HTTPS in production
  • Store API keys securely (environment variables)
  • Use POST method for sensitive operations
  • Implement proper error handling

Rate Limiting

API usage is monitored and tracked. Excessive requests may be rate-limited to ensure service availability.

Contact support for rate limit increases

Need Help?

Our support team is here to help you integrate with the OneTest API

Contact Support Visit Website