Verify that a query allowlist, depth limiting, amount limiting, or query cost analysis is used to prevent GraphQL or data layer expression Denial of Service (DoS) as a result of expensive, nested queries.
Verify that a query allowlist, depth limiting, amount limiting, or query cost analysis is used to prevent GraphQL or data layer expression Denial of Service (DoS) as a result of expensive, nested queries.
Verify that GraphQL introspection queries are disabled in the production environment unless the GraphQL API is meant to be used by other parties.
Verify that GraphQL introspection queries are disabled in the production environment unless the GraphQL API is meant to be used by other parties.