GraphQL ships insecure by default - and one nested query can take you down

Here is a GraphQL server that passes every test, ships to production, and is wide open on day one: const server = new ApolloServer({ typeDefs, resolvers, introspection: true, }); It resolves qu