Skip to content

graphql-http vulnerable to CSRF attack #80

Closed
Closed
graphql-http vulnerable to CSRF attack#80
Labels
questionFurther information is requested

Description

@fr4nco1s
fr4nco1s
opened on Apr 24, 2023

Hi,

graphql-http seems to be vulnerable to CSRF attack.

Is it planed to implement an anti-CSRF system, like tokens management on GraphQL endpoints ?

Activity

  1. graphql
    locked and limited conversation to collaborators on Apr 24, 2023
  2. enisdenjo
    converted this issue into a discussion #81 on Apr 24, 2023
  3. enisdenjo
    added
    questionFurther information is requested
    on Apr 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions