class

GraphqlTagger

Inherits Tagger < Reference < Object

Constants

BODY_PARAM_NAMES = Set {"query", "mutation", "subscription", "graphql", "gql"}

Param names that plausibly carry a raw GraphQL document, so a value that looks like a query/selection set is decisive even on a generic URL like /api. Keeping the set tight avoids scanning unrelated values (a JSON body, a search string) for GraphQL syntax.

INTROSPECTION_NAMES = Set {"__schema", "__type"}

Strong, near-unique introspection signals: tagging on either alone is safe because __schema/__type are GraphQL meta-fields, not names that show up in REST inputs.

WORDS = ["query", "mutation", "subscription", "operationname", "__schema", "__type", "graphql", "variables"]

Instance methods

perform(endpoints : Array(Endpoint))
Source