OWASPASVS 5.0 requirement
ASVS-V4.3.1 A query allowlist, depth limiting, amount limiting, or query cost analysis is used to prevent graphql or data layer expression denial of…
- Standard
- OWASP ASVS 5.0
- Chapter
- V4 API and Web Service
- Section
- V4.3 GraphQL
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that a query allowlist, depth limiting, amount limiting, or query cost analysis is used to prevent GraphQL or data layer expression Denial of Service (DoS) as a result of expensive, nested queries.