vektah / gqlparser / 635

87%

Build Type

push

circleci

Committed by web-flow

Commit Message

Token limit fix CVE-2023-49559 (#291)

* Add directive limit to prevent overloading

* Added token limit to parser for query and schema parsing, removed my previous directive limit

* Added token limit to parser for query and schema parsing, removed my previous directive limit

* Update parser/parser.go

* Update parser/parser.go

* Update parser/query.go

* Fix lint

Signed-off-by: Steve Coffman <steve@khanacademy.org>

---------

Signed-off-by: Steve Coffman <steve@khanacademy.org>
Co-authored-by: Yuval Moravchick <yuval.moravchick@catonetworks.com>
Co-authored-by: Steve Coffman <StevenACoffman@users.noreply.github.com>
Co-authored-by: Steve Coffman <steve@khanacademy.org>

Run Details

6 of 11 new or added lines in 3 files covered. (54.55%)

1 existing line in 1 file now uncovered.

4401 of 4967 relevant lines covered (88.6%)

1.03 hits per line