hasura / hasura/graphql-engine
Request for HASURA_GRAPHQL_MAX_ALIAS_COUNT configurable in Hasura Cloud instance
Open
k/enhancement
- Dominant language
- TypeScript
- Stars
- 32.1k
- Forks
- 3k
- PR merge metrics
- PR metrics pending
Description
### Is your proposal related to a problem?
We need the option to configure the limitation of alias allowed in single GraphQL query to address batching attack (a known security issue in GraphQL)
https://lab.wallarm.com/graphql-batching-attack/
### Describe the solution you'd like
Ability to configure the alias limitation in Hasura Cloud instance: `HASURA_GRAPHQL_MAX_ALIAS_COUNT`
### Describe alternatives you've considered
None
Contributor guide
Assessment
This issue has not been assessed yet.