You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To help with securing parser usage in server and/or router environments we should allow limiting the number of tokens that can parsed by the parser. This can expand on the existing recursion limit API we already have, but apply to not only selection sets, but all nodes.
To help with securing parser usage in server and/or router environments we should allow limiting the number of tokens that can parsed by the parser. This can expand on the existing recursion limit API we already have, but apply to not only selection sets, but all nodes.
Prior art
GraphQL Java has an implementation limiting number of parsed tokens to help prevent DOS attacks in java graphql servers. And so does graphql-js
The text was updated successfully, but these errors were encountered: