ocelot-Social-Community/Ocelot-Social
1
0
Fork 0
mirror of https://github.com/Ocelot-Social-Community/Ocelot-Social.git synced 2025-12-13 07:46:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Revert the taggedCount and postCount

Browse Source 
We need the order input types for our admin features.

This is a potential DOS vulnerability: Ordering the tags by taggedCount
might lead to very expensive cypher statements.
This commit is contained in:
roschaefer 2019-11-15 00:30:30 +01:00
parent 0e3ace36fb
commit fe48c0f4f2
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/src/schema/types/type/Category.gql
View File

@ -11,6 +11,8 @@ enum _CategoryOrdering {
createdAt_desc createdAt_desc
updatedAt_asc updatedAt_asc
updatedAt_desc updatedAt_desc
postCount_asc
postCount_desc
} }
type Category { type Category {

4
backend/src/schema/types/type/Tag.gql
View File

@ -27,6 +27,10 @@ type Tag {
enum _TagOrdering { enum _TagOrdering {
id_asc id_asc
id_desc id_desc
taggedCount_asc
taggedCount_desc
taggedCountUnique_asc
taggedCountUnique_desc
} }
type Query { type Query {