1.12

Added

• Add a -f option to force a scan when the endpoint cannot be identified

Fixed

• JSON output format was incorrect, fixed by @mjfwebb

1.10

Added

• graphql-cop now iterates through various possible GraphQL endpoints if none is specified @halfluke

1.9

Fixes

• GraphiQL check not catching content due to headers. @halfluke

1.8

Added

• Multi-header support
• Changed GET timeout
• IDE detection logic

1.7

Added

• better error handling
• split tests tracing/exception
• add opnames

1.6

Added

• Post based CSRF detection

Removed

• Circular Fragments, risky.

1.5

Added

• New detection

Fixed
Only print vulnerabilities when not using -o json

1.4

Added

• Circular Fragment test

1.3

Added

• Circular Query based on Introspection (DoS) check

1.2

Added

• Better JSON output
• cURL reproduction commands

Removed

• Consolidated HTTP Clients