-
Notifications
You must be signed in to change notification settings - Fork 23
Open
Description
This library has a security issue:
even if you apply a middleware on a table, this middleware is not applied on same table when called in a nested query. So, for example, if you create an auth middleware on a table, you can access to private data via nested queries instead.
There's an alternative library on which i'm working on currently: https://github.com/alirizwan/sequelize-graphql-schema/ without this issue
Metadata
Metadata
Assignees
Labels
No labels