GraphQL Trusted Documents: Stop Letting Strangers Write Your Queries
Somewhere in your codebase there is a GraphQL endpoint sitting on the public internet, and it will happily execute any document a stranger sends it. Maybe you turned off introspection and called it a
grimicorn.hashnode.dev5 min read