drupal-graphql / drupal-graphql/graphql
Revealing number of unpublished content in reverse reference
- Dominant language
- PHP
- Stars
- 287
- Forks
- 198
- PR merge metrics
- No merged PRs in 30d
Description
If I query referenced entities reversly (reference field is on referenced entity, not current one) it will return array of all entities - published one are returned as object, but unpublished as null:
```
"reverseProductIdProductTerm": {
"entities": [
null,
{
"fieldDate": {
"value": "2020-06-01",
"endValue": "2020-06-30"
}
}
]
}
```
I consider reveling number of unpublished entities as low priority security issue.
Drupal core 8.9.1
GraphQL 8.x-3.0
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.