Exploring the Security Implications of GraphQL(fastly.com)
fastly.com
Exploring the Security Implications of GraphQL
https://www.fastly.com/blog/exploring-the-security-implications-of-graphql
1 comments
There is some useful information here, but saying docs are more secure than introspection makes no sense. The person can learn about your file upload endpoint through docs. Security through obscurity is not a reasonable security strategy.