Reject deeply-nested queries

2016-10-06 11:05:47 +02:00
parent fe2546dbbb
commit 4c121cb9f5
1 changed files with 3 additions and 0 deletions
--- a/app/graph/consul_schema.rb
+++ b/app/graph/consul_schema.rb
@@ -1,6 +1,9 @@
 ConsulSchema = GraphQL::Schema.define do
  query QueryRoot

+  # Reject deeply-nested queries
+  max_depth 7
+
  resolve_type -> (object, ctx) {
    # look up types by class name
    type_name = object.class.name