https://endpoint

• API uses graphql
  • Introspection isn’t enabled
  • Not possible, escaped proeprly in ID parameter
• [x] Test for XSS in the ID parameter as its reflected
• [ ]

https://endpoint

• API uses graphql
  • Introspection isn’t enabled
  • Not possible, escaped proeprly in ID parameter
• [x] Test for XSS in the ID parameter as its reflected