I have a query on the rationale of being specifying the Schema Location on an incoming payload for a POST/PATCH given that a calling client could potentially specify a URL that yields a 404 or one that gives insufficient or incorrect validation. Does it make sense? If so, what would be an appropriate response given a 404? A invalid payload due to not being able to validate? I totally understand returning it as the API is in control of that data. Any advice you could give on this would be great.
#General------------------------------
Mark Neil
Hansen Technologies
------------------------------