drupal-graphql / graphql

GraphQL integration for Drupal 9/10
286 stars 202 forks source link

[4.x] Missing isRouted and access check in route_load data producer #1306

Closed dbosen closed 1 year ago

dbosen commented 2 years ago

When the redirect module is used and redirect paths are resolved with the route_load data producer, the isRouted() and access() checks are not executed. This leads to problems, when route_loud is called for a redirect to an external url. They should not resolve to anything.

dbosen commented 2 years ago

Here is a PR with a test and fix:

1305