OWASPASVS 5.0 requirement
ASVS-V4.3.2 Graphql introspection queries are disabled in the production environment unless the graphql api is meant to be used by other parties.
- Standard
- OWASP ASVS 5.0
- Chapter
- V4 API and Web Service
- Section
- V4.3 GraphQL
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that GraphQL introspection queries are disabled in the production environment unless the GraphQL API is meant to be used by other parties.