TIP: You can type at any time to perform a new search.
GraphQL Demo
graphql_demo · OCA/rest-framework
⚠ Security warnings
/graphql/demo— HTTP endpoint 'GraphQLController.graphql' disables CSRF protection while requiring an authenticated session: a malicious page can act on behalf of the logged-in user route-user-csrf-off
Found by automated static analysis: these patterns are usually risky, but only a manual review of the module can confirm a real issue.
- Repository
- OCA/rest-framework · module folder · Try on Runboat
- Module version
- 1.0.1
- Category
- Uncategorized
- Folder size
- 0.04 MB
- License
- LGPL-3
- Application
- No
- Auto-installable
- No
- Website
- https://github.com/OCA/rest-framework
- Last tracking update
- 2026-08-07 08:22:55
- Authors
- ACSONE SA/NV, Odoo Community Association (OCA)
- Maintainers
- ACSONE SA/NV, Odoo Community Association (OCA)
- Committers
- Stéphane Bidoul, OCA-git-bot, oca-ci
- Odoo dependencies
- Python dependencies
- graphene, graphql_server==3.0.0b7
- System dependencies
- None
- Required by
- None
- Description
This is a demonstration module providing a sample GraphQL endpoint, as well as tests for `graphql_base`.
Code Analysis ⓘ
Views touched (0)
No views found for this module.
HTTP endpoints (2)
| Route(s) | Handler | Auth | Type | Methods | Flags |
|---|---|---|---|---|---|
/graphiql/demo |
GraphQLController.graphiql |
user | http | ALL | |
/graphql/demo |
GraphQLController.graphql |
user | http | ALL | csrf off |
Models touched (0)
No models found for this module.
Loading…
Loading…
Loading…
Loading…
Loading…
- Status
- Open migration PR — not merged yet for this version
- CI status
- checks failing
- Open since
- 641 days ago
- Last activity
- 179 days ago
- Repository
- OCA/rest-framework
- Pull request
- [18.0][MIG] graphql_demo: Migration to 18.0 (#475)