graphql-python / graphql-python/graphql-core-legacy

Protect against malicious queries

Open
#29 6 comments 7 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
372
Forks
175
PR merge metrics
No merged PRs in 30d

Description

The Scala implementation of GraphQL (Sangria) provides a way for being protected against malicious queries.

More info: http://sangria-graphql.org/learn/#protection-against-malicious-queries

Could be very useful if the executor could support the following:
- Maximum query complexity based on analysis of the query
- Limit query depth

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the executor and the linked Sangria documentation on protection against malicious queries. Define how query-complexity analysis and maximum depth should be exposed and validated, then identify the relevant tests or entry points before implementation. Done means both limits are supported and their behavior is covered by tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
backend-api-design
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.