New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Investigate whether example code handles file validation properly #11

Open

klausi opened this issue Sep 28, 2021 · 0 comments

klausi commented Sep 28, 2021

After the GraphQL 4.2 security release at https://www.drupal.org/project/graphql/releases/8.x-4.2 the file validation code was changed to fix an invalid file reference during validation. It appears that the example https://github.com/drupal-graphql/graphql-examples/blob/master/src/Plugin/GraphQL/Mutations/FileUpload.php for GraphQL 3.x uses a different logic and is not vulnerable, but please double check that.

Thanks!

# for free to join this conversation on GitHub. Already have an account? # to comment