Site icon API Security Blog

The GraphQL language is so complex, that it’s hard to create a parser for it.

2. The GraphQL Language#
The GraphQL language is very powerful and expressive, but also very easy to misuse. This makes the language vulnerable to many attacks: Cross-site scripting (XSS) , SQL injection , CRLF injection . These are just some of the vulnerabilities that can be exploited with a simple typo in your query or mutation operation. Let’s have a look at an example:
If you’re using Apollo Client 2.0+ and want to use fragments in your queries/mutations, you might think about something like this:   { user(id: “1”) { ..
https://t.co/KrroLjihx6

Exit mobile version