changelogs/unreleased/security-64519-nested-graphql-query-can-cause-denial-of-service.yml · 79038226aa483dba8cb8a07ad5d7188a2336ef8c · nexedi / gitlab-ce

Check for recursion and fail if too recursive · 7539775d

charlieablett authored Aug 23, 2019

- List all overly-recursive fields
- Reduce recursion threshold to 2
- Add test for not-recursive-enough query
- Use reusable methods in tests
- Add changelog
- Set changeable acceptable recursion level
- Add error check test helpers

7539775d

security-64519-nested-graphql-query-can-cause-denial-of-service.yml 106 Bytes

Replace security-64519-nested-graphql-query-can-cause-denial-of-service.yml