|
|
|
|
|
by flagged24
1040 days ago
|
|
If you consume your own graphql endpoint you can add some layer of security by only allowing predefined queries and inspect the provided query variables. I use PostGraphile as an Express middleware and only allow whitelisted requests. |
|