Hacker News new | ask | show | jobs
by flagged24 1040 days ago
If you consume your own graphql endpoint you can add some layer of security by only allowing predefined queries and inspect the provided query variables. I use PostGraphile as an Express middleware and only allow whitelisted requests.