allow graphql content-types

vcarvajal-sigsci · vcarvajal-sigsci · commit be2b128054f1 · 2021-05-25T09:09:53.000-07:00
diff --git a/module.go b/module.go
@@ -473,6 +473,10 @@ func inspectableContentType(s string) bool {
 	// gRPC (protobuf)
 	case strings.HasPrefix(s, "application/grpc"):
 		return true
+
+	// GraphQL
+	case strings.HasPrefix(s, "application/graphql"):
+		return true
 	}
 
 	return false
diff --git a/module_test.go b/module_test.go
@@ -270,6 +270,7 @@ func TestInspectableContentType(t *testing.T) {
 		{true, "text/x-javascript"},
 		{true, "text/x-json"},
 		{true, "application/javascript"},
+		{true, "application/graphql"},
 		{false, "octet/stream"},
 		{false, "junk/yard"},
 	}
@@ -328,6 +329,7 @@ func TestModule(t *testing.T) {
 		{genTestRequest("POST", "http://example.com/", "application/rss+xml", `<a>1</a>`), 403, "XSS"},
 		{genTestRequest("POST", "http://example.com/", "application/rss+xml", `<a>1</a>`), 500, "XSS"},
 		{genTestRequest("POST", "http://example.com/", "application/rss+xml", `<a>1</a>`), 200, ""},
+		{genTestRequest("POST", "http://example.com/", "application/graphql", `{}`), 200, ""},
 	}
 
 	for pos, tt := range cases {

Original file line number	Diff line number	Diff line change
`@@ -270,6 +270,7 @@ func TestInspectableContentType(t *testing.T) {`
`270`	`270`	`{true, "text/x-javascript"},`
`271`	`271`	`{true, "text/x-json"},`
`272`	`272`	`{true, "application/javascript"},`
	`273`	`+ {true, "application/graphql"},`
`273`	`274`	`{false, "octet/stream"},`
`274`	`275`	`{false, "junk/yard"},`
`275`	`276`	`}`
`@@ -328,6 +329,7 @@ func TestModule(t *testing.T) {`
`328`	`329`	{genTestRequest("POST", "http://example.com/", "application/rss+xml", `<a>1</a>`), 403, "XSS"},
`329`	`330`	{genTestRequest("POST", "http://example.com/", "application/rss+xml", `<a>1</a>`), 500, "XSS"},
`330`	`331`	{genTestRequest("POST", "http://example.com/", "application/rss+xml", `<a>1</a>`), 200, ""},
	`332`	+ {genTestRequest("POST", "http://example.com/", "application/graphql", `{}`), 200, ""},
`331`	`333`	`}`
`332`	`334`
`333`	`335`	`for pos, tt := range cases {`