From 719a438628dfc6af7c7b19ffad9b0f1737e4b27b Mon Sep 17 00:00:00 2001 From: Laurin Quast Date: Sat, 17 Jun 2017 14:51:38 +0200 Subject: [PATCH] Adds DisableIntrospection validation rule to the DocumentValidator (default: disabled) --- src/Validator/DocumentValidator.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/Validator/DocumentValidator.php b/src/Validator/DocumentValidator.php index 540765d..837080a 100644 --- a/src/Validator/DocumentValidator.php +++ b/src/Validator/DocumentValidator.php @@ -25,6 +25,7 @@ use GraphQL\Utils; use GraphQL\Utils\TypeInfo; use GraphQL\Validator\Rules\ArgumentsOfCorrectType; use GraphQL\Validator\Rules\DefaultValuesOfCorrectType; +use GraphQL\Validator\Rules\DisableIntrospection; use GraphQL\Validator\Rules\FieldsOnCorrectType; use GraphQL\Validator\Rules\FragmentsOnCompositeTypes; use GraphQL\Validator\Rules\KnownArgumentNames; @@ -100,6 +101,7 @@ class DocumentValidator 'UniqueInputFieldNames' => new UniqueInputFieldNames(), // Query Security + 'DisableIntrospection' => new DisableIntrospection(DisableIntrospection::DISABLED), // DEFAULT DISABLED 'QueryDepth' => new QueryDepth(QueryDepth::DISABLED), // default disabled 'QueryComplexity' => new QueryComplexity(QueryComplexity::DISABLED), // default disabled ];