"Understanding GraphQL Security: Protecting Your Server from Abuse" Resources

Search for a command to run...

No comments yet. Be the first to comment.
The Change In Behavior GitHub Copilot is a fantastic tool. I have used it since the closed beta, and it has become part of my daily process. I enjoy opening the GitHub Copilot Chat view after working on a file and asking, "Is there any other suggeste...
Recently, I have been looking for ways to optimize my Stream Closed Captioner application. During one of my typical scroll-throughs of my Following lists and other sites, I discovered Nebulex. Nebulex, a local and distributed caching toolkit for Eli...

Phoenix Channels are amazing. They make using WebSocket connections a breeze. They are even more lovely using them with Absinthe, a GraphQL server implementation, and GraphQL Connections. But over time, I discovered Phoenix Channels has a downside. I...

You'll love the GitHub Command Palette if you're looking for a way to navigate, search, and run commands on GitHub with just your keyboard. This feature is currently in public beta, and it lets you access any page or resource on GitHub with a few key...

Supporting resource for my talk at GraphQL Summit, "Understanding GraphQL Security: Protecting Your Server from Abuse" Resources
Disable Introspection - Not only disable GraphiQL but also prevent introspection.
Block field suggestions - Prevent returning field suggestions and leaking your schema to unauthorized actors.
Character Limit - Limit the number of characters in a GraphQL query document.
Cost limit - Limit the complexity of a GraphQL document.
Max Aliases - Limit the number of aliases in a GraphQL document.
Max Depth - Limit the depth of a GraphQL document.
Max Directives - Limit the number of directives in a GraphQL document.