Try this on your GraphQL API: sign up twice with the same email. On a lot of TypeScript + Postgres backends you get one of two responses. Mode 1: the leak. { "errors": [{ "message": "duplicate key value violates unique constraint \"users_email_key\"", "extensions": { "code": "INTERNAL_SERVER_ERROR" } }], "data": null } Your table name, your... Weiterlesen: Your GraphQL API has two error modes: leaking Postgres internals, or …
Intelligence View
⚡ tsecurity.de Intelligence
Your GraphQL API has two error modes: leaking Postgres internals, or "Internal server error"
Try this on your GraphQL API: sign up twice with the same email. On a lot of TypeScript + Postgres backends you get one of two responses. Mode 1: the leak. {…
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili