Security audit doesn't seem to understand 4XX and 5XX reponses

[jessdwitch]

When I set responses with 4XX as the status, I still get back errors like "406 response should be defined for all GET, POST, PUT, PATCH, and DELETE operations" or "415 response should be defined for operations receiving a body (POST, PUT, PATCH)". It's weird because in the help text it suggest using default, which is less specific, so I don't think it's an issue of not including that specific code.

[ak1394]

Thanks a lot for reporting the issue. I'll pass it onto a team working on Security Audit to get a clarification.