Clojurians Log v2
Clojure programming
Channels
Apps
graphql
chrisulloa 2020-11-11T01:06:58.071Z
Does Lacinia do any validation on highly recursive or nested queries? Is there a depth limit? I know a common DOS attack is to find highly recursive, self-referencing objects.
hlship 2020-11-11T17:22:43.072600Z
There's an existing issue about checking for this; essentially a fragment should not be able to loop back (directly or indirectly) to itself.
orestis 2020-11-11T05:42:04.072300Z
No, it doesn’t, but AFAIK it exposes the parsed query before execution so you can do this yourself.