search

doyensec / inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
https://doyensec.com/
Apache License 2.0
1.53k stars 158 forks source link

Display comments from the GraphQL schema #70

Closed execveat closed 1 year ago

execveat commented 1 year ago

GraphQL schema can include descriptive comments which get displayed in GraphiQL, but not InQL. It's not immediately clear how to show them - inline, as a mousover, etc. But having this functionality would be very useful.

thypon commented 1 year ago

the intermediate representation is dropping these, I think. We may want to include them there too.

execveat commented 1 year ago

We could also add additional comments, for example to indicate complex types.

execveat commented 1 year ago

Moved to GQLSpection: https://github.com/doyensec/GQLSpection/issues/23