Protected Against GraphQL Alias Overloading

Risk: secure

Description

The GraphQL API is protected against Alias Overloading attacks through the use of strict alias limits and query execution timeouts, ensuring that malicious or overly complex queries cannot exhaust server resources.

Recommendation

The implementation is secure, no recommendation apply.

Detect this with Ostorlab

Ostorlab checks web applications, APIs and networks for this issue.

Create an account

Links

• Beagle Security
• Sylhare

Standards

• OWASP_TOP_10:
  • A03_2021