graphql-hive / graphql-hive/console
Validate uuid before forwarding them to db engine
Open
bug
good first issue
- Dominant language
- TypeScript
- Stars
- 483
- Forks
- 145
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 65
Description
Right now using an invalid uuid as a mutation/query parameter (e.g. `xxxx-xxxx-xxxx-xxxx` or `i-do-not-exist`), will raise an `Unexpected error.` that is sent to the client with the original reason `invalid input syntax for type uuid` raised by the DB engine.
This could potentially allow someone to quickly exhaust the Sentry contingent... as an unexpected error is reported to sentry.
Contributor guide
Assessment
This issue has not been assessed yet.