runsybil.com
Beyond Introspection: The Apollo Federation Attack Surface Hidden in Plain Sight | RunSybil Blog
An exposed Apollo Federation subgraph can leak its full schema and internal graph behavior through federation helper fields, such as _service { sdl }, even when standard GraphQL introspection is…