Skip to content

Indexer: add GraphQL query depth/complexity limiting #779

Description

@Haroldwonder

Summary

indexer/src/schema.graphql allows deeply nested queries (e.g. attestations → issuer → attestations) with no depth or complexity limit, making the endpoint vulnerable to a single malicious query exhausting database connections.

Acceptance Criteria

  • A query complexity/depth limiter is added to the GraphQL server setup in indexer/src/graphql.ts.
  • Exceeding the limit returns a GraphQL error rather than executing the query.
  • A test confirms an over-limit query is rejected.

Metadata

Metadata

Assignees

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions