Description
Your web application's GraphQL implementation accepts non-JSON queries over POST requests, increasing the risk of Cross-Site Request Forgery (CSRF) attacks. The request was sent with Content-Type application/x-www-form-urlencoded and succeeded.
Remediation
Restrict GraphQL queries to JSON-based POST requests to limit the CSRF attack surface.