Learn about our RFC process, Open RFC meetings & more.Join in the discussion! »

graphql-playground-middleware-lambda

1.7.19 • Public • Published

graphql-playground-middleware-lambda

Koa middleware to expose an endpoint for the GraphQL Playground IDE SECURITY NOTE: All versions of graphql-playground-middleware-lambda until 1.7.17 or later have a security vulnerability when unsanitized user input is used while invoking lambdaPlayground(). Read more below

Installation

Using yarn:

yarn add graphql-playground-middleware-lambda

Or npm:

npm install graphql-playground-middleware-lambda --save

Usage

See full example in examples/basic.

minimal example:

const lambdaPlayground = require('graphql-playground-middleware-lambda').default
 
exports.handler = lambdaPlayground({
  endpoint: '/dev',
})

Security Notes

All versions before 1.7.17 were vulnerable to user-defined input to lambdaPlayground(). Read more in the security notes

Security Upgrade Steps

To fix the issue, you can upgrade to 1.7.17. If you aren't able to upgrade, see the security notes for a workaround.

yarn: yarn add graphql-playground-middleware-lambda@^1.7.17

npm: npm install --save graphql-playground-middleware-lambda@^1.7.17

Install

npm i graphql-playground-middleware-lambda

DownloadsWeekly Downloads

38,295

Version

1.7.19

License

MIT

Unpacked Size

9.95 kB

Total Files

9

Last publish

Collaborators

  • avatar
  • avatar