IBM / openapi-to-graphql

Translate APIs described by OpenAPI Specifications (OAS) into GraphQL
https://developer.ibm.com/open/projects/openapi-to-graphql/
MIT License
1.61k stars 211 forks source link

Remove _openAPIToGraphQL from arbitrary JSON in arrays #450

Open cwisdo opened 2 years ago

cwisdo commented 2 years ago

I observed this leak in a mutation that returned an array of arbitrary JSON objects representing rows of data (attribute-value pairs). In addition to leaking the security information, it increased the data size significantly as every JSON object at the second level contained the data.