Protected Against GraphQL Circular Fragments
Description
The GraphQL API is protected against Circular Fragment attacks through depth limits and static analysis, preventing infinite recursion and server resource exhaustion.
Recommendation
The implementation is secure, no recommendation apply.
Detect this with Ostorlab
Ostorlab checks web applications, APIs and networks for this issue.
Create an accountLinks
- Circular Fragment Exploitation in GraphQL with BurpSuite
- Managing Circular Imports in GraphQL Modules
Standards
- OWASP_TOP_10:
- A03_2021