doyensec / inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
https://doyensec.com/
Apache License 2.0
1.51k stars 156 forks source link

Fix parsing of GraphQL fragments in editor views #98

Closed execveat closed 1 year ago

execveat commented 1 year ago

Editor views don't handle GraphQL fragments well. They actually can get lost completely right now.

execveat commented 1 year ago

This has been fixed along the way I guess. Tested by creating request in Repeater and pasting the following query to GraphQL tab:

fragment UserInfo on User {
  id
  name
  age
}

fragment AddressInfo on Address {
  street
  city
  country
}

query GetUser($id: ID!) {
  user(id: $id) {
    ...UserInfo
    address {
      ...AddressInfo
    }
  }
}

After that, go to Pretty/Raw and edit something - come back to GraphQL and observe that the query is fine. Tried playing with it but didn't find any parsing issues. I guess it got fixed by a random commit in GQLSpection.