Securing GraphQL at HackerOne | Hacker News Reader