evaluate user provided input as message template

[m1111]

Hello,

using https://docs.apigee.com/api-platform/reference/message-template-intro

I want the user to be able to use template messages so he could do something like both samples below in the http request

exaample-Apigee-proxyname.com/test?name=joe&id=22222

exaample-Apigee-proxyname.com/test?name={randaomLong(10)}&id={createUuid()}

i have seen similar but i’m not able to do it, here’s an example request and response

so use should be able to insert normal string or a built-in function from the template message.

[dchiesa1]

what? no, don’t try that. That would be a security minefield.

Maybe the only reason to try to do that, is to try to find a security bug in Apigee so you can claim a bug bounty.

[m1111]

no, i’m trying to build the app dynamically this has nothing to do with bugbounties

so if you know how to do it just help, no security risk it’s just built-in functions like md5 hash and createuuid etc !!

[dchiesa1]

can you elaborate on the business purpose, beyond “build the app dynamically”? Why would you need the user input to pass things that get interpreted as a message template? What is the reason for that?

[m1111]

why that is needed ?
I just saw it implemented somewhere and liked to try it as it’s more flexible, it’s just technical question !

could you please help me doing it ? nothing wrong with that it’s documented stuff i’m just asking how to dynamically impalement it