News for hackers. Stuff that matters.
Re:I've fuzzed parts of the GitHub API. Here are my findings by brap on Wednesday November 30, 2022 @03:04PM (#33806815)
Would any of these errors be present if they used GraphQL instead of REST? Obviously the ones with headers can still happen, but it looks like everything else is related to schema enforcement
Re:I've fuzzed parts of the GitHub API. Here are my findings by ludovicianul on Wednesday November 30, 2022 @04:05PM (#33807673)
It's only OpenAPI for now with limited support for request templates.
Re:I've fuzzed parts of the GitHub API. Here are my findings by brap on Thursday December 01, 2022 @03:43AM (#33813831)
I know, I'm wondering if switching to something like GraphQL or tRPC would solve many of these issues, which seem to be around violating the OpenAPI contract