Request for HASURA_GRAPHQL_MAX_ALIAS_COUNT configurable in Hasura Cloud instance

Author: alex-sl-engCreated Dec 5, 2024Updated Sep 8, 2026
Labelsk/enhancement

Is your proposal related to a problem?

We need the option to configure the limitation of alias allowed in single GraphQL query to address batching attack (a known security issue in GraphQL)

https://lab.wallarm.com/graphql-batching-attack/

Describe the solution you'd like

Ability to configure the alias limitation in Hasura Cloud instance: HASURA_GRAPHQL_MAX_ALIAS_COUNT

Describe alternatives you've considered

None