graphql-cop
Fast security auditor for GraphQL: checks introspection, batching, field suggestions, CSRF, and DoS-prone features in one pass.
Tags: graphql, audit, misconfig
- Category
- graphql
- Maintenance signal
- maintained
Use this when: GraphQL. A schema is inventory. The finding is an operation on an object the caller does not own.
Install
pip
pip install graphql-copCommand templates
Audit endpoint
graphql-cop -t {url}