Skip to content

Conversation

@bprusinowski
Copy link
Collaborator

@bprusinowski bprusinowski commented Oct 13, 2025

Closes #2465

This PR:

  • introduces a GQL nesting limit (1), to prevent DoS attacks,
  • disables GQL introspection in production to make it harder to inspect all available queries.

TODO:

  • Think about batching limits

  • I added a CHANGELOG entry
  • I made a self-review of my own code

@vercel
Copy link
Contributor

vercel bot commented Oct 13, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
visualization-tool Ready Ready Preview Comment Oct 14, 2025 1:40pm

@bprusinowski bprusinowski merged commit 37f9786 into main Oct 14, 2025
13 of 14 checks passed
@bprusinowski bprusinowski deleted the fix/gql-query-depth branch October 14, 2025 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

✓ Security Misconfiguration

2 participants