Skip to content

fix(graphql): tighten depth and complexity limits - #340

Open
johnephraim949-web wants to merge 1 commit into
Pidoko257:mainfrom
johnephraim949-web:fix/graphql-depth-complexity-limits
Open

fix(graphql): tighten depth and complexity limits#340
johnephraim949-web wants to merge 1 commit into
Pidoko257:mainfrom
johnephraim949-web:fix/graphql-depth-complexity-limits

Conversation

@johnephraim949-web

@johnephraim949-web johnephraim949-web commented Jul 30, 2026

Copy link
Copy Markdown

Summary

  • lower GraphQL depth limits from 5 to 4 to block overly nested fan-out queries
  • lower per-request complexity budget from 500 to 300 to reduce abuse risk while preserving typical client traffic
  • update regression tests and docs to reflect the new limits

Closes #280
Closes #281
Closes #282
Closes #296

@drips-wave

drips-wave Bot commented Jul 30, 2026

Copy link
Copy Markdown

@johnephraim949-web Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant