Understanding GraphQL Security: Protecting Your Server from Abuse - Erik Guzman
GraphQL's "ask for what you need and get exactly that" is great, but it can also be exploited to "get what they want without your permission and crash your app". To protect your GraphQL server, it is important to understand the different ways in which it can be abused.