-
https://discuss.dgraph.io/t/cant-update-node-to-create-edge-due-to-auth-rules/13061
https://discuss.dgraph.io/t/bug-auth-rules-of-parent-not-respected-when-child-with-hasinverse-is-added/12955/5
E…
-
### Describe the bug
gh --version 2.46.0
When I `gh pr create -f -r $reviewer` in a repository with codeowners, github will automatically request a codeowner review, even if $reviewer is a codeowner.…
-
Motivation:
With the introduction of parrot-friendly@5.0.0 and parrot-graphql@5.0.0, the underlying @graphql-tools/mock went from v2 to v8. Through this change, mocked resolver behaviors changed and …
-
### Issue:
Currently, if you enable GraphQL feature and have a Lucene Query (with a Schema) then there is no way to secure the Lucene Query.
### How to Observe
1. Enable GraphQL feature
2. Enabl…
-
### Description
- Custom Scalars for GraphQL?
- Zod schemas somehow turned into GraphQL?
- Additional Zod validation for GraphQL scalars like `UserInput`
- Form validations
- Introduce a sh…
-
ModSecurity should include a new feature to parse graphQL queries. Nowadays, many big companies are using graphQL. It involves complex configurations that may expose the applications to various secur…
-
### Which packages are impacted by your issue?
_No response_
### Describe the bug
The NPM package micromatch is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs …
-
### Gloo Edge Product
Enterprise
### Gloo Edge Version
v1.16
### Is your feature request related to a problem? Please describe.
Today we create all our graphql schemas using the autogen…
-
@martinbonnin and @glasser at Apollo were discussing CSRF, timing attacks, etc. Benjie feels that general HTTP concerns (security, rate limiting, cookies, etc etc) are concerns outside of the GraphQL-…
-
### Issue workflow progress
_Progress of the issue based on the
[Contributor Workflow](https://github.com/the-guild-org/Stack/blob/master/CONTRIBUTING.md#a-typical-contributor-workflow)_
- …