GHSA-4852-vrh7-28rf Reflected XSS in GraphQL Playground

• npm graphql-playground-html: < 1.6.22 → fixed in 1.6.22

Impact directly impacted: • `graphql-playground-html@ { const { endpoint } = qs.parse(req.url) res.html(renderPlaygroundPage({endpoint: sanitizeUrl(endpoint) })).status(200) next() } ``` or, with `graphql-playground-express`: ```js const { expressPlayground } = require('graphql-playground-middleware-express'); const { sanitizeUrl } = require('@braintree/sanitize-url'); const qs = require('querystringify'); const { renderPlaygroundPage } = require('graphql-playground-html'); module.exports = (req, res, next) => { const { endpoint } = qs.parse(req.url) res.html(expressPlayground({endpoint: sanitizeUrl(endpoint) })).status(200) next() } ``` References • OWASP: How to Test for CSS Reflection Attacks • Original Report from Cure53 (jpg) Credits Masato Kinugawa of Cure53 For more information If you have any questions or comments about this advisory: • Open an issue in graphql-playground • Email us at [email protected]