drupal-graphql / drupal-graphql/graphql

Revealing number of unpublished content in reverse reference

Open
#1,027 2 comments 1 reaction 0 assignees View on GitHub
3.x
Dominant language
PHP
Stars
287
Forks
198
PR merge metrics
No merged PRs in 30d

Description

If I query referenced entities reversly (reference field is on referenced entity, not current one) it will return array of all entities - published one are returned as object, but unpublished as null:

```
"reverseProductIdProductTerm": {
"entities": [
null,
{
"fieldDate": {
"value": "2020-06-01",
"endValue": "2020-06-30"
}
}
]
}
```

I consider reveling number of unpublished entities as low priority security issue.

Drupal core 8.9.1
GraphQL 8.x-3.0

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.