fix: Data schema exposed via GraphQL API public introspection (GHSA-48q3-prgv-gm4w) (#9819)

2025-07-10 04:25:09 +02:00
parent 2c29756038
commit c58b2eb6eb
8 changed files with 193 additions and 22 deletions
--- a/src/Options/Definitions.js
+++ b/src/Options/Definitions.js
@@ -292,6 +292,12 @@ module.exports.ParseServerOptions = {
    help: 'Mount path for the GraphQL endpoint, defaults to /graphql',
    default: '/graphql',
  },
+  graphQLPublicIntrospection: {
+    env: 'PARSE_SERVER_GRAPHQL_PUBLIC_INTROSPECTION',
+    help: 'Enable public introspection for the GraphQL endpoint, defaults to false',
+    action: parsers.booleanParser,
+    default: false,
+  },
  graphQLSchema: {
    env: 'PARSE_SERVER_GRAPH_QLSCHEMA',
    help: 'Full path to your GraphQL custom schema.graphql file',