Types of Common Vulnerabilities
SQL injection
Access Control
Information Disclosure
NoSQL Injection
How to turn ON or OFF the GraphQL Interface?
Toggle between true or false for the parameter graphiql. Note that you can still send query via the API request even if the interface is turned off.
Reference