Menu
GraphQL was recently released, and it seems to encourage writing your queries client-side.
912
Client-side GraphQL is a client-side infrastructure that interfaces with data from a GraphQL server to perform the following functions: It manages data by sending queries and mutating data without you having to construct HTTP requests all by yourself.
One major benefit of GraphQL is that it allows you to fetch and update data in a declarative manner. Put differently, we climb up one step higher on the API abstraction ladder and don't have to deal with low-level networking tasks ourselves anymore.
Performance is the main reason to use a GraphQL client. Caches are generally used to speed things up. So, many assume that the primary benefit of Apollo Client or Relay comes from the fact that it is able to improve the performance of your application by lowering roundtrips.
Applications using GraphQL are still prone to the same common vulnerabilities we all know and dread. It's up to the developer to properly validate and sanitize input to prevent malicious requests. For example, let's look at how we might exploit an OS command injection vulnerability via GraphQL.
Since this wasn't answered by the users who answered it in the slack channel, I'll post their answers.
Answers credited to charlie and samwgoldman from the GraphQL/#general Slack chat.
146
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
