Protect both headers and payload.yaml

doctype: CRE
id: 426-842
links:
- document:
    doctype: CRE
    id: 435-702
    name: Communication encryption
    tags:
    - Cryptography
  type: Contains
- document:
    doctype: Standard
    hyperlink: https://github.com/OWASP/ASVS/blob/v4.0.2/4.0/en/0x21-V13-API.md
    name: ASVS
    section: V13.2.6
    subsection: ''
    version: ''
  type: Linked To
- document:
    doctype: Standard
    hyperlink: ''
    name: CWE
    section: '345'
    subsection: ''
    version: ''
  type: Linked To
- document:
    doctype: Standard
    hyperlink: ''
    name: Cheat_sheets
    section: https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html
    subsection: ''
    version: ''
  type: Linked To
- document:
    doctype: Standard
    hyperlink: ''
    name: Cheat_sheets
    section: https://cheatsheetseries.owasp.org/cheatsheets/REST_Assessment_Cheat_Sheet.html
    subsection: ''
    version: ''
  type: Linked To
- document:
    doctype: Standard
    hyperlink: ''
    name: Cheat_sheets
    section: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
    subsection: ''
    version: ''
  type: Linked To
name: Protect both headers and payload
tags:
- API/web services
- RESTful