search

CDLUC3 / dmsp_backend_prototype

The GraphQL (Apollo server) backend for the new DMSP system
0 stars 0 forks source link

Review GraphQL security measures #35

Open briri opened 3 weeks ago

briri commented 3 weeks ago

We need to review these common security vulnerabilities with GraphQL to make sure we are addressing them all:

https://cheatsheetseries.owasp.org/cheatsheets/GraphQL_Cheat_Sheet.html#dos-prevention

We will be setting up an AWS web application firewall (WAF) so we can hopefully manage some DDoS issues with it's rate limiting capabilities.

andrewebdev commented 3 weeks ago

That website is also good for tracking security for other technologies as well. I frequent websites like this often when I develop apps.