doyensec / inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
https://doyensec.com/
Apache License 2.0
1.51k stars 156 forks source link

GraphQL versions are iterated in the wrong order #134

Closed execveat closed 9 months ago

execveat commented 9 months ago

We have multiple versions of GraphQL schemas in order to fall back to the most compatible. However, they are tried in the wrong order right now, starting with the oldest one.

I think the fix is as easy as reverting the iteration order in https://github.com/doyensec/inql/blob/dev/src/main/kotlin/inql/graphql/Introspection.kt#L23 , but please review this.

lokiuox commented 9 months ago

Done!