Request for HASURA_GRAPHQL_MAX_ALIAS_COUNT configurable in Hasura Cloud instance
Author: alex-sl-engCreated Dec 5, 2024Updated Sep 8, 2026
Labelsk/enhancement
Is your proposal related to a problem?
We need the option to configure the limitation of alias allowed in single GraphQL query to address batching attack (a known security issue in GraphQL)
https://lab.wallarm.com/graphql-batching-attack/
Describe the solution you'd like
Ability to configure the alias limitation in Hasura Cloud instance: HASURA_GRAPHQL_MAX_ALIAS_COUNT
Describe alternatives you've considered
None
Source: hasura/graphql-engine